Cannot log into Azure due to MFA

Question

Cannot log into Azure due to MFA

Matthew Dugal 0

I am having trouble logging into Azure due to MFA. I can login to office.com, outlook.com, login.live.com, and I can manage my account and MFA settings. But Azure asks for two different MFA notifications, the second of which I cannot get past.

I have virtual machines and blob storage running. I am currently logged in on my Surface device, but cannot login anywhere else.

The account in question is not this account because I worked with chat support for multiple hours yesterday and the solution he provided was to create a new Azure account and file a support request. But that request has brought me here.

Can someone please point me in the right direction to reach a support technician that can solve this problem?

Raja Pothuraju 43,500 Reputation points Microsoft External Staff Moderator

2025-08-12T14:13:18.4+00:00
Hello Matthew Dugal,

Based on your description, it appears that you are unable to log into the Azure Portal due to an incomplete MFA process. Since the device registered for second-factor authentication are not getting any MFA prompts, you are unable to complete the authentication.

The reason you are able to complete MFA for office.com, outlook.com, login.live.com, but not for Azure, is likely because the affected user account is a Personal Microsoft Account (MSA). Personal Microsoft Accounts have their own separate MFA registration, which is different from the MFA registration used for Azure work or school accounts. As a result, MFA set up for an MSA will not carry over to an Azure (work/school) account, and vice versa.

To fix this issue, you need to reset MFA on affected user account by logging in with another global administrator account into that tenant.

Please share the following steps with another Global Administrator in the tenant to reset your MFA settings:

Sign in to the Microsoft Entra admin center as an Authentication Administrator (or higher).

Navigate to Identity > Users > All users.

Select the affected user, then choose Authentication methods.

At the top of the window, click on "Require re-register MFA".

After this is done, you should be able to sign in again and register a new MFA authentication method when prompted.

If you're the only Global Administrator in the tenant, this qualifies as a tenant lockout scenario. In that case, we’ll need to involve Microsoft’s Data Protection team through a support ticket to help restore access.

To proceed, I’ll need a few details from you. Since this information contains personally identifiable information (PII), please send the following via private message:

Contact phone number (with country code)

Contact email address

Affected Global Admin email address

Country

Time zone

Once received, we can connect offline to discuss further steps and assist in resolving the issue.
Matthew Dugal 0 Reputation points

2025-08-12T14:38:30.1033333+00:00

Ok. Since I am still logged in via my Surface device I was able to navigate to that place. I am the only user listed there, thankfully I am logged in via my surface.

When I click "require re-register" and confirm, I get the following toast message: "Delete operation failed. Try this command again or delete them one by one in the user authentication methods blade."
Matthew Dugal 0 Reputation points

2025-08-12T15:10:50.6666667+00:00

Additionally, when I navigate directly to the Authentication methods blade, I see this:
Default sign-in method (Preview) No default

But if I login, it definitely wants me to provide an MFA via app or via a code.
Matthew Dugal 0 Reputation points

2025-08-12T15:38:06.31+00:00

I think I better delete all virtual machines and blob storage before I lose access to this account. I've spent so many hours on this issue.

1 answer

Your answer

Matthew Dugal 0 Reputation points

2025-08-12T14:38:30.1033333+00:00

Ok. Since I am still logged in via my Surface device I was able to navigate to that place. I am the only user listed there, thankfully I am logged in via my surface.

When I click "require re-register" and confirm, I get the following toast message: "Delete operation failed. Try this command again or delete them one by one in the user authentication methods blade."
Matthew Dugal 0 Reputation points

2025-08-12T15:10:50.6666667+00:00

Additionally, when I navigate directly to the Authentication methods blade, I see this:
Default sign-in method (Preview) No default

But if I login, it definitely wants me to provide an MFA via app or via a code.
Matthew Dugal 0 Reputation points

2025-08-12T15:38:06.31+00:00

I think I better delete all virtual machines and blob storage before I lose access to this account. I've spent so many hours on this issue.

Answer 1

Raja Pothuraju 43,500 Microsoft External Staff Moderator

Hello Matthew Dugal,

This is expected behavior — you cannot re-register MFA for your own account from the admin side. To do this for an account, you would need to sign in with another Global Administrator account.

Seeing "Default sign-in method (Preview) – No default" is also expected.

If you want to register a new MFA method for your own account, you can do so directly from: https://mysignins.microsoft.com/security-info

From there, you can add a new MFA method as needed.

Raja Pothuraju 43,500 Reputation points Microsoft External Staff Moderator

2025-08-19T19:05:32.2033333+00:00

Hello Matthew Dugal,

If all your concerns have been resolved, I would greatly appreciate it if you could mark the answer as "Accepted." This helps both us and others in the community.

Share via

Cannot log into Azure due to MFA

1 answer

Your answer