Administrator SSPR not offering Mobile App

Question

question

JanKahl-0502 asked Feb 9, '22 vipulsparsh-MSFT commented Feb 11, '22

Administrator SSPR not offering Mobile App

Hello,

since a few days, when adding a new admin account in Azure only email and telephone are available as methods for SSPR, but not the mobile app:

In the Azure configuration, all authentication methods are mentioned:

Any Ideas?

Regards,

Jan

azure-ad-sspr

image.png (39.7 KiB)

image.png (65.5 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-02-11T12:17:24.27Z

vipulsparsh-MSFT answered Feb 11, '22 vipulsparsh-MSFT commented Feb 11, '22

@JanKahl-0502 After taking this thread offline we found that the tenant's combined Security information registration experience was set to OFF which resulted in the behavior where the authenticator App was not being asked to setup.

Once we enabled the option, the Admin account can now be setup with the authenticator app. Here is the setting location :
Azure AD – User Settings -- Manage user Feature Settings – User Can use the combined security information registration Experience.

Hope this might help someone else who comes looking for a solution for a similar ask.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

image.png (190.6 KiB)

image.png (57.9 KiB)

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT · Feb 10 at 08:21 AM

@JanKahl-0502 Thanks for reaching out.

A quick test in my lab tenant shows all the option an admin has available. At the same time that admin should have registered that Auth app under security Info as well.
I could not make that out from your first screenshot but seems it talks about the Auth App method.

In my lab it is shows against the device you register the App with :

Can you confirm the same from the admin account by going to https://mysignins.microsoft.com/security-info and see if it shows a mobile device register against it.
We can discuss further if the above seems right in your tenant, where we would need to take the admin account information from your and investigate further. (For that you can drop us an email at azcommunity@microsoft.com with subject "Atten-Vipul") I can then sync up with you offline to take further details.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 ·

image.png (37.5 KiB)

Answer 2 · 2022-02-10T08:29:37.893Z

JanKahl-0502 answered Feb 10, '22 vipulsparsh-MSFT commented Feb 11, '22

Hello Vipul,

thanks for your reply. Using https://mysignins.microsoft.com/security-info, the authenticator app cann be added. Unfortunately, after registering the Authenticator App and logging in again the"We need more information" screen does still appear, and from there only email and phone can be selected. On the security information page, the Authenticator App shows as registered like in your screenshot.

Regards,

Jan

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT · Feb 11 at 04:53 AM

@JanKahl-0502 As next steps I would need to check those user accounts at backend. Send me an email at azcommunity@microsoft.com with subject "Atten-Vipul" I will sync up with you to investigate further.

0 ·

question