

Opening the Microsoft Authenticator App and signing in with AzureAD username/password (Add Account -> Work or School -> Sign in and following steps) Even a user self-service way that I could document. Was hoping there was a better way to handle this. Now, while this does work, it is not always easy to get a user on the phone andf in front of their PC for the entire 5 minutes that this takes. Approve the test approval notificaiton on phone Scan the QR code on PC screen, click next. On Phone in App, Have user tap Add Account -> Work or School -> Scan QR code. Click Next, until we get to the QR code screen See prompt stating "More information is needed" If not already, have user install Microsoft Authenticator app on new phone Remove the phone device from the user's AzureAD user in Azure portal/Authenticaiton Methods until a user gets a new phone then we have to do what we call the "MFA Dance"įrom initial MFA setup, User shows their MFA status as ENFORCED so we. Office 365, Enterprise E5 licenses for all users and MFA enabled using the Microsoft Authenitcator app. Complete the account recovery process and tap OK.Good afternoon, hoping someone has already solved this issue and can help guide me:.Or, authenticate the recovery account via an alternative MFA (multi-factor authentication) method such as email, SMS, or password. Enter the verification code you receive on your old mobile device.

