MS Authenticator question

[duckson]

My daughter has a new iPhone for Xmas and now cannot access her college Office365 account as the MS Authenticator app pops up when she wants to login and her new device isn’t registered to her 365 account so no pop up!
No problems previously with her old iPhone which now my wife has, I assume if I wipe my wife’s profile and reinstall my daughters profile via iCloud on the old iPhone she will be able to authenticate her 365 login and sort out the new/old devices?

College admin isn’t in and she could do with it sorting asap!
Wanted to check the above was a valid option before I wipe and reinstall!

Thanks.

[dapprman]

From memories of the last place I worked it is the authentication side (i.e. the college) where the change has to occur, think it uses the phone's IMIE number as part of the security check is simply installing it on a new device and using your O365 login does not work. I know I had a moo at my old place when I updated my phone.

[Paulsd]

MS Authenitcator can backup profiles to icloud - you need to have enabled it first though as it's not on by default.

If you've wiped the phone to give it to your wife, I doubt restoring it with your daughter's old backup will help much (other than adding the app).

When she tries to login, does she get the option to authenticate via another method (e.g. via SMS)? I doubt this will work as any decent IT department will have disabled that as well.

[Paulsd]

You can also try logging into the Azure Portal to reset the MFA...

https://account.activedirectory.windowsazure.com/p...

May not let you in without authenticating correctly (i.e. with Autheniticator) first. If you can get access to this you can remove the old phone and add the new one. It may also let you setup backup MFA.

[duckson]

I don’t think it’s backed up to iCloud, she wouldn’t have enabled it.

No other methods available, once we get back in I’ll make sure there is other options added eg email, text etc (if the College allow it).

[duckson]

Paulsd said:

You can also try logging into the Azure Portal to reset the MFA...

https://account.activedirectory.windowsazure.com/p...

May not let you in without authenticating correctly (i.e. with Autheniticator) first. If you can get access to this you can remove the old phone and add the new one. It may also let you setup backup MFA.

Yea it wants authentication first so no go.

[drmotorsport]

Is there no other authentication method setup such as SMS or email (the M in MFA)? Otherwise the admin will need to reset authentication methods on the account so the new device can be added.

[duckson]

drmotorsport said:

Is there no other authentication method setup such as SMS or email (the M in MFA)? Otherwise the admin will need to reset authentication methods on the account so the new device can be added.

Nope. I’ll make sure she has this option next time.