Microsoft Entra | Streamlined Same-Device Number Matching and First Run Experience (FRX) in Microsoft Authenticator

Message Center ID: MC1117816
Microsoft Entra
Stay Informed
Feature update User impact
September 2025 October 2025

Summary

Microsoft Authenticator will streamline same-device sign-ins by removing number entry, requiring only a Yes/No confirmation, and improve onboarding by prioritizing Microsoft Entra accounts and highlighting QR code scanning. Rollout begins late September to mid-October 2025, with no admin action needed.

Details

Updated September 16, 2025: We have updated the timeline. Thank you for your patience.

Introduction

We're introducing two updates to Microsoft Authenticator that simplify the sign-in experience and improve onboarding for Microsoft Entra users. These changes aim to reduce friction during same-device sign-ins and make it easier for users to get started with the app.

When this will happen

General Availability (Worldwide, GCC): We will begin rolling out by late September or early October 2025 (previously mid-September) and expect to complete by mid-October 2025 (previously early October).

How this will affect your organization

Streamlined same-device number matching

  • Today, users signing in on the same mobile device as their Microsoft Authenticator app often encounter a blocker: the notification appears over the sign-in screen, hiding the number they need to enter. This forces them to tap “I can’t see the number” to proceed.
  • With this update, that friction is removed. Users will no longer be required to enter a number when signing in on the same device. Instead, they’ll simply confirm the sign-in by tapping Yes or No.
  • On Android, all same-device sign-in flows will support this streamlined experience. No number entry required.
  • On iOS, users will also benefit from this change. When the SSO extension is involved, users will still need to switch to the Authenticator app to complete the sign-in, but number entry will not be required.
  • Users signing in from a different device will continue to use number matching as usual.

Improved First Run Experience (FRX)

  • The updated FRX consolidates privacy screens and prioritizes adding a Microsoft Entra account over a personal Microsoft account.
  • The “Scan a QR code” option will also be more prominently displayed to simplify account setup.

What you need to do to prepare

No admin action is required. These changes will roll out automatically as users update their Microsoft Authenticator app.

Compliance considerations

No known compliance impacts. Please review internally to ensure alignment with your organization's policies.

Change History

September 16, 2025 at 6:30 PM Updated
Summary
Previous
Microsoft Authenticator will streamline same-device sign-ins by removing number entry, allowing users to simply confirm sign-in. The First Run Experience is improved by prioritizing Microsoft Entra accounts and highlighting QR code scanning. Rollout begins mid-September 2025 with no admin action required.
New
Microsoft Authenticator will streamline same-device sign-ins by removing number entry, requiring only a Yes/No confirmation, and improve onboarding by prioritizing Microsoft Entra accounts and highlighting QR code scanning. Rollout begins late September to mid-October 2025, with no admin action needed.
Last Updated Date
Previous
2025-07-18T23:40:00.680Z
New
2025-09-16T17:54:21.067Z
Tags
Previous
Feature update,User impact
New
Updated message,Feature update,User impact
Body Content
Previous

Introduction

We're introducing two updates to Microsoft Authenticator that simplify the sign-in experience and improve onboarding for Microsoft Entra users. These changes aim to reduce friction during same-device sign-ins and make it easier for users to get started with the app.

When this will happen

General Availability (Worldwide, GCC): We will begin rolling out in mid-September 2025 and expect to complete by late September to early October 2025.

How this will affect your organization

Streamlined same-device number matching

  • Today, users signing in on the same mobile device as their Microsoft Authenticator app often encounter a blocker: the notification appears over the sign-in screen, hiding the number they need to enter. This forces them to tap “I can’t see the number” to proceed.
  • With this update, that friction is removed. Users will no longer be required to enter a number when signing in on the same device. Instead, they’ll simply confirm the sign-in by tapping Yes or No.
  • On Android, all same-device sign-in flows will support this streamlined experience. No number entry required.
  • On iOS, users will also benefit from this change. When the SSO extension is involved, users will still need to switch to the Authenticator app to complete the sign-in, but number entry will not be required.
  • Users signing in from a different device will continue to use number matching as usual.

Improved First Run Experience (FRX)

  • The updated FRX consolidates privacy screens and prioritizes adding a Microsoft Entra account over a personal Microsoft account.
  • The “Scan a QR code” option will also be more prominently displayed to simplify account setup.

What you need to do to prepare

No admin action is required. These changes will roll out automatically as users update their Microsoft Authenticator app.

Compliance considerations

No known compliance impacts. Please review internally to ensure alignment with your organization's policies.

New

Updated September 16, 2025: We have updated the timeline. Thank you for your patience.

Introduction

We're introducing two updates to Microsoft Authenticator that simplify the sign-in experience and improve onboarding for Microsoft Entra users. These changes aim to reduce friction during same-device sign-ins and make it easier for users to get started with the app.

When this will happen

General Availability (Worldwide, GCC): We will begin rolling out by late September or early October 2025 (previously mid-September) and expect to complete by mid-October 2025 (previously early October).

How this will affect your organization

Streamlined same-device number matching

  • Today, users signing in on the same mobile device as their Microsoft Authenticator app often encounter a blocker: the notification appears over the sign-in screen, hiding the number they need to enter. This forces them to tap “I can’t see the number” to proceed.
  • With this update, that friction is removed. Users will no longer be required to enter a number when signing in on the same device. Instead, they’ll simply confirm the sign-in by tapping Yes or No.
  • On Android, all same-device sign-in flows will support this streamlined experience. No number entry required.
  • On iOS, users will also benefit from this change. When the SSO extension is involved, users will still need to switch to the Authenticator app to complete the sign-in, but number entry will not be required.
  • Users signing in from a different device will continue to use number matching as usual.

Improved First Run Experience (FRX)

  • The updated FRX consolidates privacy screens and prioritizes adding a Microsoft Entra account over a personal Microsoft account.
  • The “Scan a QR code” option will also be more prominently displayed to simplify account setup.

What you need to do to prepare

No admin action is required. These changes will roll out automatically as users update their Microsoft Authenticator app.

Compliance considerations

No known compliance impacts. Please review internally to ensure alignment with your organization's policies.

Never Miss a Microsoft 365 Update

Join thousands of IT professionals who rely on DeltaPulse for real-time Microsoft 365 change intelligence, automated notifications, and community insights.