Forum Discussion
Azure MFA "Activation Failed" error with Microsoft Authenticator App
We've opened a premier ticket, but has anyone in the community seen this error before? We've got a few users that can't set up the Microsoft Authenticator app, and nothing we do is working. This is...
I already posted a separate reply, but in the time since... I may have found a solution. I don't like coming across posts without something to try, so wanted to add my steps here (you never know when someone else is looking for it). Again though (here comes the disclaimer), this is an old post (no further info from the original case, so it could be that we're dealing with 2 different issues). Whilst my error message matched exactly that shared in the original post, from the research I did it looks like there may be other error messages that could be the same/similar issue (and don't mention 'push notifications' in the error).
To be clear, we were seeing this error for one user at the point of scanning a QR code in the Microsoft Authenticator app to add an account (Office 365 account where we had just enabled the user's MFA).
First, probably worth sharing the first few basic things we tried;
- Try again
- Try manually with code and URL
- Try configuring MFA through an incognito/private window
- Check device push notifications
- Check device permissions
- Check device for latest OS and app updates
- Deleted and reinstalled the MS Authenticator app
- Disable and re-enable user's MFA (requires admin)
I found a link in a separate Microsoft Support article (which may still be useful... https://support.microsoft.com/en-gb/help/3120908/activation-failed-error-when-you-try-to-set-up-azure-multi-factor-auth). Link within the article didn't work for me, but am assuming that could be our Azure subscription or the age of the link (article is 2016).
Essentially, we're trying to check if the user's MFA has been blocked.
Whilst the link contained within the above article did not work, this did (as a global admin);
- Go to Azure portal
- Go to Azure Active Directory
- Go to MFA
- Go to Block/unblock users
My problem user was listed there.
- Press Unblock
- Provide Reason
- Press OK
All that remains now is to know why they got blocked in the first place (parking that for a rainy day... or someone else)
- Just saved me an endless MS ticket, thanks.
- The last suggestion was the fix that worked. Thank you!
With the new entra id, I wasn't finding what to click.
https://portal.azure.com/#view/Microsoft_AAD_IAM/MultifactorAuthenticationMenuBlade/~/BlockedUsers/fromProviders//hasMFALicense/true
is where I ended up and it worked as you said.
I got there from admin.microsoft.com
users (left menu)
active users (left menu)
Multi-Factor authentication (top bar)
service settings (top bar, I didn't ever notice this before)Manage advanced settings and view reports Go to the portal (very bottom)
block/unblock users (left menu)UPDATE for the new Entra admin center experience page
Go to Protection > Multifactor authentication > Block/unblock users
Thank you, this worked for me.
- We just had an user experience this problem – and after some searching found this post.
Would have thought that MS could have made a more helpful error message in the 6 years from the original post – making it more obvious that the problem is with the account / 2FA rather than the users device. - Thank you so much. This really helped. I tried all the other things, and nothing was working. I was afraid I was going crazy, and I had the end user sitting with me. This really saved me. Just an FYI, my admin level didn't have access to this and I had to have a global admin click the "unblock" for me.
Dave Palmer Thanks Dave, will try this
- Thank you so much! This was very helpful!
Dave wanted to thank you for your post. I was experiencing the same issue and your instructions resolved it. In our case the user got a pop up about blocking a personal account and when she did it blocked her on Azure's MFA.Dave Palmer
- Brilliant - thanks for sharing! Exactly what I needed
Dave Palmer Thank you very much for sharing this! Was trying everything to fix the same issue and was about to submit a ticket to Microsoft when I came across your post.
- Thank you so much..!
This is extremely helpful, Thank you Dave Palmer
