Hi, I am unable to log into my Azure Subscription. I enabled MFA and now I am getting 2 consecutive MFA prompts when I try to log into Azure. I receive the first alert in my Authenticator phone app and enter the sign in prompt number, but I never receive the second sign in alert in my Authenticator phone app. I worked with twitter/x account @AzureSupport , and they recommended I ask the question here so that one of our community experts can take a closer look and assist. I'm receiving invoices for my Azure subscription, but I am unable to login. Thank you for your help.

@Alex Minutillo Thank you for posting this in Microsoft Q&A. I understand that when you attempt to log into the Azure Portal, you encounter two MFA prompts. You are able to complete the first prompt, but the second prompt does not send a notification to your Microsoft Authenticator on your mobile device. This issue seems to occur specifically when logging into the Azure Portal. Looks like you are using your guest account to login to Azure portal. The first MFA prompt likely originates from your home directory. After completing this, it appears that you are being redirected to another directory where your user account might be listed as a guest. Since MFA is enabled in that directory as well, it triggers a second MFA prompt. If this is the situation then you will have to configure your guest account also in your Microsoft authenticator app. This can be done by contacting your Global admin of the resource tenant where your account is provisioned as a guest user. Or if you are trying to login to your home directory then as a workaround, you can try logging into the Azure Portal using the following URL format: https://portal.azure.com/<tenantID> . Replace <tenantID> with the ID of your home directory. This approach forces you to log in directly to your home directory, potentially bypassing the redirection issue. If you are unsure about your tenant ID, you can find it by entering your domain in the following URL: https://www.whatismytenantid.com/ Once logged into the Azure Portal, you can review the Microsoft Entra sign-in logs to investigate the root cause of the double MFA prompts. Let me know if you have any further questions. Please " Accept the answer " if the information helped you. This will help us and others in the community as well.

Getting two MFA prompts when logging into Azure, but only one prompt in Authenticator App

Accepted answer

Sandeep G-MSFT 19,921 Reputation points Microsoft Employee

2024-11-13T03:38:26.2066667+00:00

@Alex Minutillo

Thank you for posting this in Microsoft Q&A.

I understand that when you attempt to log into the Azure Portal, you encounter two MFA prompts. You are able to complete the first prompt, but the second prompt does not send a notification to your Microsoft Authenticator on your mobile device. This issue seems to occur specifically when logging into the Azure Portal.

Looks like you are using your guest account to login to Azure portal.

The first MFA prompt likely originates from your home directory. After completing this, it appears that you are being redirected to another directory where your user account might be listed as a guest. Since MFA is enabled in that directory as well, it triggers a second MFA prompt.

If this is the situation then you will have to configure your guest account also in your Microsoft authenticator app. This can be done by contacting your Global admin of the resource tenant where your account is provisioned as a guest user.

Or if you are trying to login to your home directory then as a workaround, you can try logging into the Azure Portal using the following URL format: https://portal.azure.com/<tenantID>. Replace <tenantID> with the ID of your home directory. This approach forces you to log in directly to your home directory, potentially bypassing the redirection issue.

If you are unsure about your tenant ID, you can find it by entering your domain in the following URL: https://www.whatismytenantid.com/

Once logged into the Azure Portal, you can review the Microsoft Entra sign-in logs to investigate the root cause of the double MFA prompts.

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

1 person found this answer helpful.
Alex M 25 Reputation points

2024-11-19T02:08:33.3333333+00:00

Hi Sandeep, thank you for your reply and recommendation. I was able to obtain my tenant ID using the method you provided. Then, when I opened the Azure Portal URL with my tenant ID, the web pages prompts "Approve sign in request. Open your Authenticator app, and enter the number shown to sign in.", however, I checked my Authenticator App on my mobile and there is no prompt. Since I am the global admin, I believe I will need someone from Microsoft to turn off MFA in my subscription, or do you know if MFA can use my email address or phone number to verify me?

Sandeep G-MSFT 19,921 Reputation points Microsoft Employee

2024-11-19T03:14:27.2833333+00:00

@Alex Minutillo

In this situation you can make changes in your tenant for your account to re-register for MFA while logging in to Azure portal.

You can ask any other Global admin in your tenant to perform below steps,

Admin has to login to Azure portal and access Azure active directory.

Once done they have to go to users blade on the left.

Click on the user account which has been locked out.

Click on Authentication methods and click on “Require re-register multifactor authentication”.

Now when you try to login to Azure services it will prompt you to register for MFA again.

If you are the only global admin on the account and are blocked entirely, you can reach out to our support team. You can look into below article to get support numbers depending on your country.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

or creating a ticket through a different account: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

Create a ticket with Microsoft support team. Give them the tenant ID which is locked out in your description. Tell them that no admin account has access anymore and your partners also have no access anymore.

Once you create a ticket with support team you will have to work with our data protection team. You will have to first prove your identity against your tenant for security purpose. Post that this team will help you with help you in getting access to your tenant or unlock your account depending on your scenario.

Also, for the future, you can create an emergency access account (break glass) in Azure AD. This account will help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in for any reason.

https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Raja Pothuraju 8,495 Reputation points Microsoft Vendor

2024-11-20T11:41:03.32+00:00

Hello @Alex Minutillo,

Thank you for updating us after reviewing the solution provided by Sandeep.

As Sandeep suggested, you can reset your MFA by requesting assistance from another global administrator in your tenant. They can achieve this by selecting the Require re-register multifactor authentication option.

For more details, you can refer to the following documentation:

Manage user authentication options

If you don’t have another global administrator available to reset your registered MFA, this situation would fall under a tenant lockout scenario. In such cases, as Sandeep mentioned, you need to raise a support ticket with the Data Protection team. They will validate your tenant and unblock it accordingly.

If you have already raised a support ticket, kindly share the ticket ID with us. This will allow us to follow up with the assigned engineer for quick assistance.

Thanks,
Raja Pothuraju.

Givary-MSFT 33,706 Reputation points Microsoft Employee

2024-11-21T10:55:34.97+00:00

@Alex Minutillo Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Alex M 25 Reputation points

2024-11-22T15:34:29.61+00:00

Hi everyone, thank you very much for your help and suggestions. As I am the only Azure subscription admin, I have followed the instruction to open a support request here "https://support.microsoft.com/en-us/support-for-business". My ticket is in open status, but I am confident it will be resolved, and I will update this thread as resolved.. I will also implement the suggested emergency access account (break glass) in Azure AD to help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in for any reason. Thanks again for your help. Sincerely, Alex
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Getting two MFA prompts when logging into Azure, but only one prompt in Authenticator App

0 additional answers

Your answer