Stuck in 2FA loop because of Authenticator

Hi Marco,

Based on your description, this appears to be a Microsoft Authenticator MFA lockout situation. Because your business account is configured to use Microsoft Authenticator as the required verification method, and you no longer have access to that authenticator registration, you are unable to complete the sign-in process. Since you are also the only Global Administrator in the tenant, there is no alternate administrator available to reset your MFA settings or help restore access.

In cases like this, the account recovery process typically needs to be handled by Microsoft's Data Protection (Tenant Recovery) team. They are the only team authorized to verify ownership of the tenant and assist with restoring administrative access when the sole Global Administrator is locked out.

I understand that you've already contacted Microsoft Support. Nevertheless, it may be worth trying again, preferably during your local business hours. From what I've seen in similar cases, persistence can sometimes help ensure the case reaches the appropriate team. When speaking with support, I recommend clearly stating from the outset that this is a sole Global Administrator MFA lockout scenario. Doing so may help route your request more efficiently.

You can find the Microsoft support phone number for your region here: Customer service phone numbers - Microsoft Support.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

• What kind of problem are you experiencing?        
• Answer: Authenticator        
• What products do you use?        
• Answer: Office 365 for business        
• Is this for an education or company account?        
• Answer: For companies        
• Are you an administrator?        
• Answer: Yes        
• Are there any other administrators in your organization?        
• Answer: No. I am the only admin in my tenant         
• Do you need a... Service request?         
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.     

Once you reach a support representative, I would suggest clearly explaining the situation, for example:

"I cannot sign in because Microsoft Authenticator is unavailable. I am the only Global Administrator in the tenant, and there is no other administrator who can reset my MFA. I need assistance with a tenant recovery or Data Protection case so that administrative access can be restored."

In addition, it would be helpful to have the following information ready, as Microsoft may require it during the verification process:

• Tenant domain name
• Administrator sign-in address (UPN)
• Subscription or billing details
• Domain ownership information
• Any additional documentation that can help confirm ownership of the tenant

If you're unable to reach a live support agent through your existing tenant, another option is to create a temporary Microsoft 365 trial tenant. This can provide access to the Microsoft 365 Admin Center, where you can open a support request and explain that you need assistance recovering access to a different tenant.

To create a temporary tenant, visit: Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

I realize how disruptive this situation can be, especially when you're the only administrator. I hope one of the options above helps you reach the appropriate team and move the recovery process forward.

Best regards,

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".