My email is attached to Entra ID that I can never touch again

Question

So this is a bit of a story. I opened my Entra ID just to see and learn around, and I was trying to add SAML SSO to my Synology.

I think I signed up with the subscription from Azure pay-as-you-go plan and I've never asked to set a password, but my Entra ID SSO page kept asking for login credentials. After looking around and painstakingly reading through MS documentation I learned my Entra ID user is not in fact, a member. It was registered as a B2B collaborator (or something similar) with my Microsoft account.

Entra ID kindly provided an option to convert the user to normal member, so I clicked that but I forgot to set my password again. So now my Entra ID user is just sitting there alone in its tenant, with no one to log in, because no one knows the password!

The problem is I've already connected my domain name (the normal internet one) there, so whenever I try to log in Microsoft asks whether I want to log in with the forgotten Entra ID one or Microsoft one. I'm looking for a way to remove the domain for good, but with no account to access it I'm unsure if this can be done without Microsoft support.

So... any ideas? Is there any way I can recover my account from the cursed Entra ID tenant?

Answer 1

@Basix

Thank you for posting this in Microsoft Q&A.

As I understand you are in a situation where you have an account in Azure and you cannot access it due to password.

You want to login to Azure using this account to perform some tasks or to continue your learning.

In this situation you only have one option, that is to contact support team to get your account unlocked.

If you are the only admin on the account and are blocked entirely, you can reach out to our support team. You can look into below article to get support numbers depending on your country.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

or creating a ticket through a different account:  https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide#phone-support

Create a ticket with Microsoft support team. Give them the tenant ID which is locked out in your description. Tell them that no admin account has access anymore and your partners also have no access anymore.

Once you create a ticket with support team you will have to work with our data protection team. You will have to first prove your identity against your tenant for security purpose. Post that this team will help you with help you in getting access to your tenant or unlock your account depending on your scenario.

Also, for the future, you can create an emergency access account (break glass) in Azure AD. This account will help prevent being accidentally locked out of your Azure Active Directory (Azure AD) organization because you can't sign in for any reason.

https://docs.microsoft.com/en-us/azure/active-directory/roles/security-emergency-access

 

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.