unable to login with my microsoft account in company intune portal.

Dear @Abhishek Sharma (Capgemini America, Inc.),

To ensure I understand your request correctly and to support you as effectively as possible, I need more specific information from you:

• Does this issue also happen in other Microsoft products (e.g. Teams, Outlook, other portals, etc)?

When you see “select Physical smart card or Certificate,” it typically means your tenant’s sign-in policy is expecting certificate-based authentication (CBA) / smart-card credentials for that flow, not just password and Authenticator.

Based on your description, your organization has enabled certificate-based authentication on Android, you must have a certificate available on the device or on a hardware security key. The article that Entra CBA on Android works with:

• certificates provisioned on-device (commonly via MDM like Intune), or
• certificates on a hardware security key (for example YubiKey) Microsoft Entra certificate-based authentication on Android devices - Microsoft Entra ID | Microsoft Learn

In that scenario, Authenticator approval alone will not satisfy the requirement, you have to contact your IT admin to:

• deploy the required certificate profile to your Android device via Intune/MDM, or
• provide an approved smart-card/derived-credential method, or
• change the policy to allow password and MFA for mobile enrollment/access.

Just in case you do not know who is your IT admin, please refer to this: How do I find my Microsoft 365 admin? - Microsoft Support

I hope the information shared helps point you in the right direction. Please try the steps above and let me know if they work. If not, we can continue working together to narrow this down.

The first response may not always resolve the issue right away, but with your help and more details, we can work toward a solution.

As a moderator, I do not have the tools to investigate your specific account directly because this is a user-to-user support forum. Our role is limited to providing technical support on reported issues, requests, or ideas. However, I will try my best to support as clearly as possible.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

The sign-in prompt for a physical smart card or certificate means the organization has configured certificate-based or smart card authentication as the required method for Intune/Company Portal and related apps (Outlook, Teams). In this configuration, password + Microsoft Authenticator alone is not enough.

To proceed, the device must have the required certificate(s) installed and trusted:

1. If the device is missing a required certificate, follow the organization’s instructions to install it. Typically this is done through Company Portal/Intune enrollment or a smart card solution (for example, Entrust or similar). If the device is already enrolled, open the Intune/Company Portal app and complete any pending steps so that it can download and install the certificates needed to access work or school resources. Do not close the app while certificates are being installed.
2. If the error persists or no option is shown to install certificates, contact the organization’s IT admin. The admin must:
   • Confirm whether smart card/certificate-based authentication is mandatory for the account.
   • Ensure the correct certificate profile is deployed to the Android device via Intune, or
   • Adjust the sign-in policy if password + Authenticator should be allowed.
3. If the organization uses AD FS with a non-public CA, the admin may need to switch to a certificate chain that ends in a publicly trusted root CA so Android apps like Company Portal and Teams can trust it.

Because the tenant is enforcing certificate/smart card sign-in, only the IT admin can change that policy or provision the required certificate. Microsoft Authenticator working by itself does not override that requirement.

References:

• Android device is missing a required certificate
• Set up Android device with Company Portal and Entrust
• Sign in to app