«Phone approvals are turned off for your organization.» (device_approvals_disabled)

Symptom

One of these messages:

• «Phone approvals are turned off for your organization.» (API 403 device_approvals_disabled); on the phone, «Phone approvals are turned off for this organization.»
• «Phone approvals are not available on this service.» (API 503 device_approver_unavailable).
• Signing in with the phone alone says it is not available for this organization (API 403 device_sign_in_disabled).

Cause

• Turned off: the administrator turned phone approvals off for the whole organization.
• Not available: on a self-hosted installation, the phone approval service is not configured.
• Phone-only sign-in: the organization does not allow passwordless sign-in with the phone; approvals as a second factor may still be on.

Fix

User: sign in with your passkey. If you have no passkey, contact your helpdesk.

Administrator:

1. Open «Manage» › «Security».
2. Turn on phone approvals and, if you want, phone-only sign-in. The second needs the first.
3. Save and confirm with your passkey.

Self-hosted: configure the approval service and phone notifications before turning the option on.

When to escalate

If the option is on and the message persists, contact support with the time and the organization's identifier.