Make Microsoft Authenticator your default sign-in method
Microsoft Authenticator should be your default sign-in method for all Microsoft and VPN logins.
If it is not, you can do the following to change it to the default sign-in method if you already have Microsoft Authenticator set up but just don't have it set as the default sign-in method:
Open a private or incognito window in your browser so that it does not try to use the saved credentials
Copy and paste this link into your browser to go to this site: https://aka.ms/mfasetup
Login
On the screen below, if you any method other than "App based authentication - notification" by where it says change, click change and choose "App based authentication - notification" as the default method and then click OK to save. A screenshot of this part is at the bottom of this email.

