Skip to content
← Back to the guide

How to reset MFA for a user in Entra ID

7slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 7

How to reset MFA for a user in Entra ID

How to reset a user's MFA in Entra ID when they have a new phone or lost their authenticator: re-register, revoke sessions, and issue a Temporary Access Pass.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 7
01

Step 1: Open authentication methods

Entra admin center to Users to the user to Authentication methods. Shows every registered method: Authenticator entries, phone numbers, FIDO2 keys, and any current TAP.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 7
02

Step 2: Delete the lost method

Delete the lost phone's Authenticator entry, even if you plan to re-register. A stolen phone still approves push prompts until the method is actually gone.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 7
03

Step 3: Require re-registration

Flags the account so combined registration runs at next sign-in. On its own this does not remove anything — that's why step 2 comes first.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 4Download PNG
M
solvingmicrosoft365.com
5 / 7
04

Step 4: Revoke sessions

Invalidates refresh tokens so a token from the old device is cut off, and the user actually sees the registration prompt instead of coasting on a cached session.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 5Download PNG
M
solvingmicrosoft365.com
6 / 7
05

Step 5: Issue a Temporary Access Pass

For a user with no remaining usable method. Set a short lifetime, read the code over a verified channel, and they register a new method on sign-in.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 6Download PNG
M
solvingmicrosoft365.com
7 / 7
06

Verify and roll back

Check sign-in and audit logs for the registration event. A legitimate reset needs no rollback; a socially engineered one gets treated as a compromise.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id

Slide 7Download PNG

Auto-generated from How to reset MFA for a user in Entra ID. This page is not indexed and isn't part of the guide itself.