When trying to access the Azure portal to manage my API

Question

When trying to access the Azure portal to manage my API,

I receive the message below. When trying to access the account to perform the

configurations, it asks me for a code to authenticate the Microsoft Authenticator account.

I do not have this APP, when I try to install it, it asks for a code for it,

but I do not have the code, since I am installing it now.

I would like some help to access the account please

Message:

User account 'my email' from identity provider

'https://sts.windows.net/cd0ff429-e48a-445d-824f-2b818e81d127/'

does not exist in tenant 'Diretório Padrão' and cannot access the application

'8c59ead7-d703-4a27-9e55-c96a0054c8d2'(My Profile) in that tenant.

The account needs to be added as an external user in the tenant first.

Sign out and sign in again with a different Azure Active Directory user account.

Answer 1

Hello @Alex Oliveira de Souza,

Thank you for sharing your details over private message.

The issue relates to a tenant lockout situation where no other global admin in the tenant has the necessary admin rights to re-register MFA.

To resolve this, we engaged our Data Protection team through a support ticket. Please connect with our support team via the ticket, and they will assist you in resolving the issue.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Answer 2

Hello Alex Oliveira de Souza,

Thank you for posting your query on Microsoft Q&A.

As per the description, we understand that when you are signing into Azure Portal to manage your API, you are not able to complete MFA as you don't have Authenticator App installed on your phone.

I have provided the steps below to reset and unblock MFA in Azure Active Directory via Azure Portal and PowerShell.

Using Azure Portal:

Sign in to the Azure portal with the tenant Global Administrator account.

Navigate to Azure Active Directory > Users > All users > Choose the user you wish to perform an action on > select Authentication methods > Require Re-register MFA.

Once this is done, the next time the user signs in, he/she will be requested to set up a new MFA authentication method.

Note: The user's currently registered authentication methods aren't deleted when an admin requires re-registration for MFA. After a user re-registers for MFA, we recommend they review their security info and delete any previously registered authentication methods that are no longer usable.

Using PowerShell :

Install the MSOnline PowerShell module.

• Run Connect-MSOLService and sign in with the Global Administrator account.
• Run ***Set-MsolUser -UserPrincipalName ***@contoso.com -StrongAuthenticationMethods @() cmdlet to reset the MFA registration information.

Please refer the below document.

https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userdevicesettings

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".