MS Auth App on iphone keeps getting hit

Question

MS Auth App on iphone keeps getting hit

Warren Dalton 0

Hello, the MS Auth app on my iphone is getting hit with sign in requests constantly. How can we determine who is hitting it? they are obviously trying to break into something,

Thanks in advance.

0 comments

1 answer

Your answer

Answer 1

Do not approve any unexpected prompts. Unrequested verification codes or sign-in prompts can mean someone is trying to access the account, or someone entered the wrong sign-in details by mistake.

To identify what is being hit and review activity:

Open the work or school account activity page at My Account.
Select Recent Activity in the left pane.
Expand each sign-in item and review the details.
Check whether the operating system, browser, app, and location make sense.

For work or school accounts, if a sign-in looks unfamiliar:

Change the password.
Go to Security info and review/update security settings.

If the prompts are tied to Microsoft Entra MFA, admins can investigate in Microsoft Entra by reviewing affected users and sign-in logs. Useful filters are:

Status = Failure
Authentication requirement = Multifactor authentication
Match the date range to when the prompts occurred
Check whether failures come from the same IP address or target the same user

If Microsoft Authenticator itself is failing to complete prompts, also verify:

The app is unlocked
Notifications are enabled
The app is updated
Network connectivity is working
Device date/time is correct

If the prompts continue after reviewing activity and securing the account, send Authenticator logs from the app using Send feedback and, for work or school accounts, contact the IT admin.