Since the account is a Microsoft 365 Business tenant and the only admin is locked out because two-step verification codes are not arriving, the issue must be handled by Microsoft support/Data Protection; it cannot be fixed from the user side.
Based on the documented process, the next steps are:
- Avoid repeated sign-in/code requests
Excessive or repetitive verification attempts can cause Microsoft Entra multifactor authentication to temporarily block sign-in or code delivery. Wait for a period before trying again and avoid repeatedly requesting SMS codes, as this can extend the block.
- Try an alternative verification method (if any exist)
If any other MFA method was ever configured (Authenticator app, office phone, email, security key), use “Sign in another way” on the sign-in screen and select that method. If no alternative method is configured or working, proceed to the next step.
- Escalate specifically to the Data Protection team via support
Because there is only one admin and that admin is locked out, Microsoft’s Data Protection team must verify identity and reset the MFA/sign-in options. Regular forum moderators or front-line agents cannot directly change MFA for an admin account. When contacting support (even if the first level seems automated or unhelpful), the key is to get a ticket created and routed to Data Protection:
- Call the regional Customer service phone numbers - Microsoft Support line.
- Wait through any initial recorded message and then choose the options for business email user and technical support.
- When the IVR asks what the problem is, clearly state “Authenticator” or “lost access to admin account with MFA”.
- When prompted:
- Product: Office 365 for business / Microsoft 365 Business.
- Account type: Company (not education, not personal).
- Are there other admins? No.
- Confirm that a service request is needed and ask to be routed to the Data Protection team for an admin MFA reset.
If the existing ticket is not progressing, request that the current case be escalated to the Data Protection team and clearly state that you are the sole global administrator and cannot pass MFA.
- Optional: Use a temporary trial tenant to open a new support ticket
If phone support keeps looping without reaching an agent, a documented workaround is to:
- Create a new, separate Microsoft 365 trial tenant using one of the business/enterprise trial plans.
- Sign in to the Microsoft 365 Admin Center of this new tenant.
- Use Help & support in the Admin Center to open a support ticket. In that ticket, state that:
- You are locked out of a different, existing Microsoft 365 Business tenant.
- You are the only administrator of that tenant.
- MFA (two-step verification) is failing because SMS codes are not received.
- You need the Data Protection team to verify identity and reset MFA for the original tenant’s admin account.
- After the original tenant issue is resolved, cancel the trial subscription for the temporary tenant to avoid charges.
- After access is restored
Once Data Protection resets MFA and access is regained, immediately:
- Configure multiple MFA methods (Authenticator app, SMS, office phone, email, security key) so there is always a backup.
- Consider going passwordless (for example, using Microsoft Authenticator or security keys) for more reliable and secure sign-in.
- Add at least one additional global admin account to avoid being locked out again if the primary admin’s MFA fails.
There is no self-service way to bypass or disable MFA for a sole admin when codes are not delivered; only Microsoft support/Data Protection can perform the necessary verification and reset.
References: