Is MS Authenticator for Android bond to tenant or registered accounts?

DrugoBot 1 Reputation point
2021-03-05T09:11:47.907+00:00

Goodmorning everyone, I state that I am a rookie of the Azure AD administration and English is not my mother tongue but, I hope to be able to correctly expose my question and get an answer.

Subject: Authenticator app for Android

Starting condition Authenticator registered in tenat # 1 (MS 365 business)

Evolution # 1
At Authenticator I add accounts of a new tenat 365 business.

Evolution # 2
Configure Backup Authenticator Credentials

Evolution # 3
I delete Authenticator from tenant # 1 and close the subscription.

Final condition / question
Having started using Autheniticator with Tenant # 1 and starting the backup of credentials when Authenticator was registered on two Tenants; now that tenant # 1 has been closed, when will I need to retrieve the credentials from the backup, will I have problems?

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,486 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,454 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ulv 81 Reputation points
    2021-03-05T09:18:43.363+00:00

    Hey @DrugoBot

    I'll assume by Authenticator app we are talking about the Microsoft Authenticator application found in the Google Play-store.

    Now you've registered MFA in Tenant #1, and for the example let's say Bob has registered Bob.Wood@tenant1.onmicrosoft.com on his Android Phone.

    And you @DrugoBot have made Tenant #2 and here Bob will need to configure his Multi-Factor Authentication again.

    My second assumption is that Bob will get a new User Account in Tenant #2 and as such he will be asked to register Multi-Factor Authentication options, and he chooses Microsoft Authenticator from the Google Play-store.

    Now Bob will have two identities in his Microsoft authenticator application on his Android phone.

    To illustrate it will be like this:

    74678-image.png

    Hope this helps

    Best regards,
    Ulv

    0 comments
  2. Vasil Michev 95,181 Reputation points MVP
    2021-03-05T10:04:28.427+00:00

    The Backup functionality is currently tied in to Personal (MicrosoftID) account, so it doesnt relate to any Azure AD tenant. If you are using iOS device, you can also use an iCloud account.

    In any case if the backup account is deleted, you will loose any stored data and you will have to manually recreate it. Also note that recovering from backup doesnt automatically and immediately allow you to use the app with the recovered account(s), you still need to go through a confirmation/verification process. Check the official documentation for more details: https://learn.microsoft.com/en-us/azure/active-directory/user-help/user-help-auth-app-backup-recovery

    0 comments