Azure sole Global Administrator locked out by Microsoft Authenticator MFA – Tenant Recovery required

Question

Azure sole Global Administrator locked out by Microsoft Authenticator MFA – Tenant Recovery required

Maka Apricus 0

I am the sole Global Administrator of a Azure and Microsoft 365 / Microsoft Entra tenant and I am completely locked out due to the loss of the Microsoft Authenticator registration.

The username and password are correct. Microsoft recognizes the work account, but after entering the password the only available authentication methods are:

Approve a request in Microsoft Authenticator

Use a verification code from Microsoft Authenticator

The Authenticator registration was on a previous phone and is no longer available. Reinstalling Microsoft Authenticator on the original device does not restore the registration.

“Sign in another way” does not offer SMS, email, phone or any other authentication method.

There is no other accessible Global Administrator who can reset the MFA methods.

I therefore cannot access the Azure and Microsoft 365 Admin Center or Microsoft Entra Admin Center to reset MFA myself.

The public Microsoft Support website redirects me to sign in with the affected administrator account, which sends me back to the same Authenticator MFA loop.

This is a Sole Global Administrator MFA lockout.

So I create a trial Azure tenant account and try to access the support portal and submit my ticket referencing my locked account.

But I can't access support, it offers me solutions that are not helpful

61128

61130

I need Microsoft to escalate this case to the Data Protection / Tenant Recovery team so that tenant ownership can be verified and the authentication methods of the sole Global Administrator can be reset.

0 comments

1 answer

Your answer

Answer 1

Good day Maka and I’m sorry to hear about the difficulties you’re experiencing.

Just to gently clarify before going any further, this forum is separate from Microsoft Support. Forum users, moderators and Microsoft external staff cannot access user accounts or directly escalate cases. For security and privacy reasons, account-specific issues can only be handled by Microsoft's dedicated support teams.

The MFA loop occurred because the authenticator app was deleted and reinstalled. This removed the existing MFA registration from the device, so the admin account can no longer complete the verification process.

I can see that you've set up a new Azure trial tenant. As the next step, please sign in to the new admin account and navigate to Microsoft 365 admin center > Support > Help & Support, as this is usually the way to contact the team that can assist with tenant access and account recovery.

User's image

Turn off the "Support Assistant" feature.

Use the keyword "Support" to quickly bypass automated suggestions > Select Contact Support.

User's image

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Additionally, sharing your preferred contact times may help the support team handle the case more efficiently.

I hope the steps above help you reach the appropriate support team and begin the recovery process.

Thank you for your patience and I wish you a smooth and successful recovery of access.

If you have any extra questions about this answer, please click "Comment".

Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.