A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because all devices that can approve Microsoft Authenticator are locked out, the account’s multifactor authentication (MFA) methods must be reset by an administrator; it cannot be bypassed by the user.
Use these steps:
- Contact the college’s IT/help desk
- Explain that:
- The password was changed successfully.
- All devices were signed out.
- Sign-in now always prompts for Microsoft Authenticator or Outlook on another device, but there is no device that can complete the prompt.
- Ask them to reset your MFA methods or clear your MFA settings for your college account.
- Explain that:
- Have the admin require re‑registration of MFA
- An Entra ID (Azure AD) admin can use the “Require re‑register MFA” option for the user so that, at next sign-in, new authentication methods can be configured (for example, re‑adding Microsoft Authenticator and/or a phone number).
- Sign in again and reconfigure MFA
- After the admin resets MFA:
- Sign in with the new password.
- When prompted, set up Microsoft Authenticator again (scan the QR code) and optionally add SMS/phone as a backup method.
- After the admin resets MFA:
- If sign-in is blocked after multiple attempts
- If many failed attempts have already been made, Entra MFA may temporarily block further sign-ins. In that case, either:
- Wait and try again after some time, or
- Use a different MFA method once the admin has added or reset it.
- If many failed attempts have already been made, Entra MFA may temporarily block further sign-ins. In that case, either:
If the college uses only one global admin and that admin is also locked out, that admin must contact Microsoft support (Data Protection team) via the official customer service phone numbers to regain access to the tenant and then reset MFA for affected users.
References:
- Common problems with two-step verification for a work or school account
- I need to reset my mfa methods - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Authenticator Did Not Complete Login