If you are allowed by your admin to use phone sign-in using the Authenticator app, you'll be able to go through device registration to get set up for passwordless phone sign-in and two-step verification. In these cases, contact the administrator for your work or school account to use this authentication method. You might also receive messages that block registration of the Authenticator app because your admin has Conditional Access policies set up. If you receive the message 'You might be signing in from a location that is restricted by your admin,' your admin hasn't enabled this feature for you and probably set up a Security Information Registration Conditional Access policy. If you don’t have enough authentication methods on your account to get a strong authentication token, you can't add an account. You’ll see an error in the Authenticator app that says “ To set up Microsoft Authenticator, you'll need to go to aka.ms/mfasetup on a web browser.”

At this point, you could potentially be blocked from proceeding by one of the following conditions: If you have a Temporary Access Pass (TAP) you can use that to sign in. Select Sign in.Įnter your work or school account credentials. Open the Authenticator app and select to the + button and tap Add work or school account.

To add an account by signing into your work or school account using your credentials:

Note: This feature is usable only by users whose admins have enabled phone sign-in using the Authenticator app for them.

Login to microsoft authenticator