Since they have removed their account from the application they can not authenticate to the portal. The problem lies in that even though they are visiting the portal from devices that are excluded from MFA via conditional access (Compliant/Hybrid AD Joined) the portal is still enforcing MFA to log in. The end users try to fix the issue themselves and will remove their accounts from the app and try to reenroll by going to and restarting the setup process. I have had multiple scenarios this week where the Microsoft Authenticator app has stopped displaying the approve/deny message. This is causing issues when users need to re set up the account in the Authenticator app. We turned off the ability to receive texts/calls and are forcing the Authenticator app.

On your computer, under Scan the QR code, select Next.We have recently implemented MFA with a conditional access policy.Use your mobile device's camera to scan the QR code shown on your computer.On your computer, under Set up your account, select Next.If this is your first time using the app, you can select Add account instead.Tap +, then Work or school account, and then Scan QR code.

On your mobile device, open the Authenticator app.

You should have the app already installed on your phone.

Under Start by getting the app, select Next.

Select Authenticator app from the list, and then select Add.

If you can sign in, select Add method.

On your computer, go to your Security info page.

You need your computer and your mobile device with the Authenticator app installed. If your mobile device doesn’t support the Apple App Store or Google Play Store, open your app store and search for 'Microsoft Authenticator.' Step 1: Add the Authenticator appįirst, add the Authenticator app as a sign-in method to your account. To get Microsoft Authenticator, use your phone's camera to scan this QR code. Required: Before continuing, install the Microsoft Authenticator app for iOS or Android.

Microsoft account authenticator setup