MFA reset
An MFA reset is an administrative or recovery action that removes or resets registered multifactor authentication methods so a user can register replacement methods.
Be specific about the method
“MFA reset” is help-desk shorthand, not a standard operation across identity systems. A ticket should identify the method being replaced and the administrative action needed. Losing access to an authenticator app is a different problem from forgetting a password.
In Microsoft Entra, Require re-register MFA deletes registered phone numbers, Microsoft Authenticator apps, and software OATH tokens, and deactivates hardware OATH tokens. It does not mean every credential on the account has been deleted.
The risky part is authorizing the replacement
For a caller who has lost their phone, the important question is whether they should be allowed to register a replacement method. Follow the approved recovery checks before making that change. Record which method was removed and which replacement was authorized, so a later reviewer can understand what the ticket actually allowed.
A method reset also differs from session revocation. Existing application sessions may need separate attention during an incident; restoring the employee’s ability to sign in does not, by itself, establish that an attacker has lost access.