MFA troubleshooting

If you can use an alternative MFA method to log in to your account, remove the MFA methods used with your missing device then use the Sign out everywhere option on the My Sign-ins website.

If you are unable to use an alternative MFA method, your MFA settings will need to be reset by your local IT support team. If you are unable to contact your local IT support team, please speak to the central IT Service Desk.

If you have set up MFA but do not have access to your MFA device, if it is not urgent then it is advisable to wait until you can regain access. You should then set up additional verification methods that do not use the same device.

If you urgently need to access your account, your MFA settings will need to be reset by your local IT support team. If you are unable to contact your local IT support team, please speak to the central IT Service Desk.

If you have previously set up MFA, you must provide this authentication when adding new devices. If you no longer have access to the your current authentication method, for example if you have replaced a phone that provided this, your MFA settings will need to be reset by your local IT support team. If you are unable to contact your local IT support team, please speak to the central IT Service Desk.

Following a reset of your MFA settings, you should set up additional verification methods to prevent future issues.

Older operating systems and applications may not prompt for a second factor, so may not be compatible with MFA.

Unsupported

The following are not supported before the version shown, or not at all.

• Android 8
• iOS 11
• macOS 10.14
• Safari 14 (macOS)
• Office for iPad Pro (iOS 11)
• Office for iPad and iPhone (iOS 12)
• Thunderbird 78
• Evolution 3.27.91
• Office 2013 (modern authentication can be enabled)
• Samsung Mail (does not work in most cases)
• Android Mail (does not work)
• Gmail (does not work)

Security keys

Security keys function slightly differently as your browser must be able to prompt for them. Most popular browsers can be used with Windows computers, for other devices the Chrome browser is likely to work, but others may not.

Opening the Microsoft Authenticator app should display current notifications, but the following may enable automatic push notifications.

One-time passwords are only valid for a short time and cannot be created correctly if the time of your device is incorrect. You should synchronise your device to ensure it is using the correct time, date and time zone.

You will initially be prompted for authentication by your most secure registered method. The order for this being:

1. Security key
2. Microsoft Authenticator prompt
3. One-time password
4. Text message or phone call

The default setting will only apply if your most secure methods are equally secure. The default order is set by Microsoft.

Stale request information is provided in our page for how to fix stale request errors. 

A 10-minute lock is applied to accounts following too many unsuccessful authentication attempts in a short time.

If the error is still happening after 30 minutes please contact the central IT Service Desk.