I have a personal Microsoft account as a guest account in my work Entra. This account has MFA enabled as a requirement to log in to Azure during the login process. I would like to add another phone with Microsoft Authenticator. I can only do this from myaccount.microsoft.com. When I try to log in with the id of a private account like email address removed for privacy reasons, I get information that I cannot log in with non-work accounts. If I use the guest account id like exampleprivate_outlook.com#EXT#@exampledomain.onmicrosoft.com, I have to enter a password which, as we know, does not exist. However, if I log in to account.microsoft.com using the account email address removed for privacy reasons and go to myaccount.microsoft.com and when logging in I select log in with a domain and provide the domain exampledomain.onmicrosoft.com, I receive information that the login was successful but access to the resource is denied. How can I give private guest accounts permission to access myaccount.microsoft.com to add another MFA device?
