MFA lockout loop

Question

MFA lockout loop

Augusto Francetich 25

I am the only Global Administrator and the only user with permissions in Microsoft 365 tenant. My Microsoft Authenticator was lost during a device reset and I am now permanently locked in an MFA loop with no alternative authentication methods available. I cannot access https://aka.ms/mfasetup or Entra admin.

Sridevi Machavarapu 33,305 Reputation points Microsoft External Staff Moderator

2025-11-27T22:12:39.72+00:00
Hello Augusto Francetich,

Based on your description, it appears that you are unable to log in to the Azure portal due to a lost MFA. Since none of the Global Administrators currently have access, this qualifies as a tenant lockout scenario.

To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us via private message only (do not post publicly):

Contact phone number (including country code)

Contact Email address

Email address (affected account)

Country

Time zone

Tenant domain name (e.g., contoso.onmicrosoft.com or verified custom domain)

Tenant ID

Azure subscription ID or billing information associated with the tenant (this helps confirm ownership)

Locale

Once we receive this information, we will forward it to Microsoft’s Data Protection Team for further assistance.

Answer accepted by question author

0 additional answers

Your answer

Sridevi Machavarapu 33,305 Reputation points Microsoft External Staff Moderator

2025-11-27T22:12:39.72+00:00

Hello Augusto Francetich,

Based on your description, it appears that you are unable to log in to the Azure portal due to a lost MFA. Since none of the Global Administrators currently have access, this qualifies as a tenant lockout scenario.

To assist you further and forward this to Microsoft’s Data Protection Team, we need some additional information. As this involves Personally Identifiable Information (PII), please share the following details with us via private message only (do not post publicly):

Contact phone number (including country code)

Contact Email address

Email address (affected account)

Country

Time zone

Tenant domain name (e.g., contoso.onmicrosoft.com or verified custom domain)

Tenant ID

Azure subscription ID or billing information associated with the tenant (this helps confirm ownership)

Locale

Once we receive this information, we will forward it to Microsoft’s Data Protection Team for further assistance.

Answer 1

Sridevi Machavarapu 33,305 Microsoft External Staff Moderator

Hello Augusto Francetich,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.

0 comments

Share via

MFA lockout loop

0 additional answers

Your answer