If you receive the message 'You might be signing in from a location that is restricted by your admin,' your admin hasn't enabled this feature for you and probably set up a Security Information Registration Conditional Access policy. If you don’t have enough authentication methods on your account to get a strong authentication token, you can't add an account. You’ll see an error in the Authenticator app that says “ To set up Microsoft Authenticator, you'll need to go to aka.ms/mfasetup on a web browser.” At this point, you could potentially be blocked from proceeding by one of the following conditions: If you have a Temporary Access Pass (TAP) you can use that to sign in. Select Sign in.Įnter your work or school account credentials. Open the Authenticator app and select to the + button and tap Add work or school account. To add an account by signing into your work or school account using your credentials: Please leave a comment in the comment box if you have any questions.Note: This feature is usable only by users whose admins have enabled phone sign-in using the Authenticator app for them.

We learned how to set up Password-less sign-in with the Microsoft Authenticator app. Follow the instructions in the app to finish registering the account for Passwordless phone sign-in.In Microsoft Authenticator, choose Enable phone sign-in from the drop-down menu for the account registered.Select Done to complete the Authenticator configuration.

Follow the instructions to install and configure the Microsoft Authenticator app on your device.Sign in, then add the Authenticator app by selecting Add method > Authenticator app, then add.Users register themselves for the Passwordless authentication method of Azure AD using the following steps.

Microsoft Authenticator uses key-based authentication to enable a user credential tied to a device, where the device uses a PIN or biometric. The Microsoft Authenticator app can be used to sign into any Azure AD account without a password.

Microsoft passwordless account