Disabling authentication methods in Entra having no effect
Fairly new to MS365 here and we're trying to restrict which MFA methods our users can use. We want our users to be able to either use the Authenticator app or a FIDO2 key depending on their role, in addition to a TAP to do the initial login. We're testing disabling various methods via the Authentication methods page in Entra. As a representative test we set TAP to disabled and it gave an error when I attempted to issue a TAP for a user via the user's Authentication methods page in Intune. However we don't get consistent results with other auth methods: Authenticator, Security key (FIDO2) and SMS. I put a specific group in the 'Enable and target' > 'Exclude' section for all 3 and was still able to configure Authenticator and a phone for SMS. When viewing the methods configured for the user, only the security key was listed under 'unusable methods'; hence the policies for Authenticator and SMS appear to have no effect. Similar tests with just one auth method yield the same result. Is there something we're doing or understanding wrongly about how these policies work?Trapped in an Authenticator Loop
Dear Community, please help! I am trapped in an Authenticator Loop. I've got a microsoft workplace account, but if I want to log in, I have to type in a code from the microsoft authenticator app. I downloaded the app, but in order to use it, I have to log into my account and in order to do so, I also have to type in a code from the authenticator app, which I don't get, because to get the code I would have to log into the authenticator app, what I would need a code for... No matter which link I click, I can't open anything before I enter the code, which I can't get. I am using teams on mac, either on a firefox browser or on the desktop app and the authenticator on an Iphone. Please don't just tell me "don't use teams on a mac", this wasn't my choice. Unfortunately, my emplyer's IT support also is chronically unavailable. So is here anyone who could help me? I've already gone through the usual deleting the app, using another browser etc. options. Best Lukas
Stuck in an authenticator loop
I have a 365 Business account. Haven't logged in for a while due to reasons, i was just starting up as a sole trader. Anyway decided now is the time to resurrect it and get up and running, except Authenticator doesn't work because I changed my phone, and my back up email is out of date, and no longer exists. I have tried the support web chat which wants to send a code to authenticator or my back up email. Just called the help line that referred me to the web chat which doesn't work, I couldn't get past the bot. So I am stuck. Any recovery options does not recognise my log in details, i think this is because its been a while since I logged in (I still pay but ....) but I can't resurrect it because I don't have a way of getting a code due to authenticator/back up email as cited above. I am really at a loss as to what to do. I don't want to abandon it and start again as there are documents in my one drive that I need. Can anyone help please. (I think all that needs to happen is an update to my back up email and then I can get going). I am the sole administrator on my business account.
Microsoft Teams and Authenticator lockdown
I’m having a very frustrating issue with Microsoft Teams. I am able to log in to teams using my normal personal email and account ONLY ON THE WEB BROWSER. From the web browser, I am not able to access the business channel that I am in. When attempting to log in on the downloaded mobile Teams App, I am sent directly to Microsoft Authenticator, which after waiting several hours, waiting even a full day, is still displaying a message about repeated verification attempt and to wait and try again later. I have accessed Microsoft support chat and they had no help for me. I need the authenticator lockdown to refresh and it will not.
Not able to do an account recovory when 2FA is enabled and Passkeey is half set up
I am not able to log into my personal account. I have tried account recovery, but I have 2FA set up so I go a message saying this is ignored. I have rest the password using 2FA but when I try to login the message is that I can not use password to login. I beleive my partern loged me out of the account and tried to log in to her account but instead started Passkey set up. I have needed to login with my company account even to raise this post. Any help would be great.
Lost Backup with Microsoft Authenticator
Hello, I lost the phone where I had set up 2FA using Microsoft Authenticator for this email address. I had previously enabled cloud backup and have now tried to restore it to a new phone by carefully following the correct backup and recovery process. However, some very valuable and critical 2FA accounts are still missing and were not restored.Lost Backup with Authenticator App
I recently changed phones and followed Microsoft’s documented process for transferring my Authenticator accounts. Before changing devices, I enabled cloud backup and confirmed that authenticator showed a successful backup dated 21 June. I then installed the app on the new phone, selected the recovery option, and signed in using the same Microsoft account. Both phones used the same operating system, and all required cloud settings were enabled. Despite this, only two of my seven accounts were restored on the new phone. The app on my old phone then stopped working. I disabled VPNs, cleared the cache, confirmed a stable internet connection, checked notification permissions, and ensured battery optimisation was not interfering. When none of this worked, I updated the app. After the update, the remaining account data had disappeared, leaving only the same two accounts restored on the new phone. I followed the correct backup and recovery process. The app confirmed that the backup had completed successfully, yet five of seven accounts were not restored. Is there any way to recover an earlier backup or should I assume that the data I need is lost because of this useless app?
I received 2FA request but I can't identify the source
Since a couple of weeks, I've started received unwanted prompt on my phone to "confirm my identity": asking me to approve (second factor). Obviously, this isn't me and I reject those. At first, I was thinking it was just some phishing/stuffing attack, but I tried to find out how I could see those attempts and it is impossible to see "failed attempt" on the Windows Account web page or on the 2FA application. I have no clue how to investigate this, I would like to confirm what is the "source" of these attempts. Is there any way to have more extensive logs?