Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
This usually happens because the approval request is still being sent to the device where Microsoft Authenticator was last used.
- Check the old phone first. If it still has Microsoft Authenticator, open the app there and approve the sign-in.
- After access is restored, go to the Security info or Additional security verification page for the school account and remove the old phone entry.
- On that same page, select Add sign-in method and add the new phone.
- If prompted for an authentication method, choose Phone and complete the setup.
- If the school uses the Authenticator app for sign-in, add the account again on the new phone during the registration flow.
If the new phone is already showing the account but it does not actually approve sign-ins, that can mean the old device is still the active notification target. Removing the old device and registering the new one fixes that.
If the old phone is no longer available, use Sign in another way or another verification method such as SMS if that option appears. If no alternate method is available for the school account, the school IT admin or helpdesk needs to reset MFA so the new phone can be registered again.