azure-active-directorymulti-factor-authenticationazure-ad-b2bauthenticator

How does a Guest User reset their MS Authenticator MFA settings in Azure Active Directory?


I know how to reset my Authenticator app MFA settings in my host tenant. I woud use this link https://account.activedirectory.windowsazure.com/proofup.aspx?proofup=1 per instructions found here https://learn.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-manage-settings, and I would click on "Set up Authenticator app" button.

enter image description here

But how do I reset my MFA in a tenant where I am a Guest?


Solution

  • If you have only one MFA method set, and this method is lost to you, then as far as i know, you cannot join the guest organizations that you need to reset the MFA for. This means you cannot reset your authenticator app by going to your profile as is suggested in the other answer.

    If you have set multiple methods for MFA (like authenticator AND phonenumber) then you may be able to log in using the 'Sign in another way' option. With this extra MFA option you can reset the MFA options that are lost to you, through 'https://myaccount.microsoft.com/'

    When you are completely locked out of the tenants you are guest in, because you lost access to all your configured MFA options, what needs to be done is this:

    1. Contact a global administrator of the organization you are guest in

    2. Let her/him/them go to you user account (Azure Active Directory>Users)

    3. Then she/he/they needs to select 'Profile > Authentication Methods'

    4. And click 'Require re-register MFA'

    5. After that you are asked to set-up MFA again for that organization when logging in.

    Step 2: enter image description here

    Step4: enter image description here