Forum Discussion
Solved
Managing Multiple M365 Administrator Accounts with Microsoft Authenticator Backup
Hello Tech Community, I am looking for some advice on how to efficiently manage and back up multiple M365 Administrator accounts using the Microsoft Authenticator app. As an IT Support profession...
I like that Microsoft Authenticator MFA cannot be restored. Allowing this would weaken security. Yes this means I must redo the non-M365 Authenticator IDs when getting another iPhone. Protocol requires one to have a minimum of two admin IDs in a M365 account, thus another admin can setup a TAP (temporary access password) to have a user reset their Microsoft Authenticator ID.
Quick update to bring this issue to a close. There is no way to have multiple M365 Global Admin MFA properly backed-up so they can be restored when moving to a new device. I was able to work with the Microsoft Data Protection Team to disable the MFA, but only after the vetted the Admin Credentials to prove I was the Gobal Admin. Going forward, I will create multiple MFA options for the Global Admin or create a backup Global Admin account for each M365 Tenant.