Uniqueness Validation setting up Azure MFA

Question

I am trying to log into our hosted Exchange Admin account to troubleshoot an issue with emails randomly not being delivered. The global account (with an onmicrosoft.com) address requires be to set up MFA through the Authenticator app, but I receive the error "The account you're trying to add is not valid at this time. Contact your admin to fix this issue (uniqueness validation)."

I have tried using a different authenticator app, deleting all of the other Azure account profiles from the app, using a text message code instead of the app code.

Since I'm not able to log into the admin account, I can't open a support ticket or review any of the account settings.

I did find this ticket which mentions a possible email address conflict on the admin account with a different user, but since I can't log into the admin account, I can't check that (Oct 26 23 update). https://learn.microsoft.com/en-us/answers/questions/1296807/mfa-user-registration-issue

Appreciate any ideas or information on how to reset admin access or how I can speak with a support person at MS who can look at the admin account to see if the above link is the issue. At this stage we have no access to manage our account licenses or users. Thank you!

Answer 1

Hi there,

Sorry to hear about the login trouble. To resolve the MFA issue and regain admin access:

Use a Different Browser or Incognito Mode: Try logging in using a different browser or in incognito mode to rule out browser-related issues.

Password Reset: Initiate a password reset for the admin account. This might help reset the MFA settings.

Contact Microsoft Support: Reach out to Microsoft Support through their official support page. Explain the urgency, referencing the uniqueness validation error and the potential email address conflict.

Hope this helps. Good luck!

Answer 2

@JFerraz

If you are the only global admin on the account and are blocked entirely, you can reach out to the Azure Data Protection team to restore access. 866-807-5850

Also, for the future, you can create an emergency access account (break glass) in Azure AD. This account will help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in for any reason.

https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access

Some other support option include;

AzureSupport

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

azcommunity@microsoft.com

or creating a ticket through a different account:  https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

 

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.