Microsoft Authenticator - re-register MFA guest account - Microsoft Q&A (2024)

FAQs

How to reset MFA for guest Users? ›

Sign in to the Azure portal. On the left, select Azure Active Directory > Users > All users. Choose your account->select Authentication methods and click "Require re-registration for MFA".

Based on your description, since you are using a work account, you may need to contact your company's M365/IT administrator to reset MFA for you through the Azure admin portal. In the Azure portal, the administrator can set your account to Require Re-register MFA.

In Microsoft Entra ID, you can accomplish this goal with a Conditional Access policy that requires MFA for access. MFA policies can be enforced at the tenant, app, or individual guest user level, the same way that they're enabled for members of your own organization.

Open the Authenticator app, select Add account from the Customize and control icon in the upper-right, select Other account (Google, Facebook, etc.), and then select OR ENTER CODE MANUALLY. Enter an Account name (for example, Google) and type the Secret key from Step 1, and then select Finish.

Click Specified users included and then select the Exclude tab. Click Save. If your practice has a single MFA policy applied for guest user accounts, this will disable the MFA prompt for external users. Internal users will still be prompted to enter MFA when logging in.

Method 1: Recovering through your Microsoft account. To recover your Microsoft Authenticator without your old phone, follow the steps in this method focused on using your Microsoft account. Access the recovery options, verify your identity, remove the old phone from the app, and set up the Authenticator on a new phone.

Choose Identity from the menu, then go to Users and select All Users. Click on the Per-user MFA option among the choices listed above. You will be directed to the multi-factor authentication page, where you can view the MFA status of all your users.

Does Conditional Access apply to guest users? ›

In a Microsoft Entra cross-tenant scenario, the resource organization can create Conditional Access policies that require MFA or device compliance for all guest and external users.

Adding multiple accounts to Microsoft Authenticator is a straightforward process. Here's a step-by-step guide to help you: Download and Install Microsoft Authenticator: If you haven't already, download and install the Microsoft Authenticator app from the Google Play Store or Apple App Store.

The secret key is like a secondary password shared between the authenticator app on your device and your Knowledge Hub account. If you have multiple devices, they must all share the same secret key. If you feel that the secret key has been compromised, you should regenerate and save a new secret key.

Apart from the Global administrator, the Privileged Authentication Administrator role have access to perform the reset MFA on all users account and Authentication Administrator role have access to perform the reset MFA on some user's account.

User Guide for Salesforce

In your Account Settings page, navigate to the Users tab. On the row of the user you wish to reset MFA for, click the three-dot menu icon. Select Reset MFA.