Tenant lockout – only Global Admin lost MFA device (Authenticator)

Cooper Beutel 0 Reputation points
2025-12-21T07:50:33.8733333+00:00

I am the only Global Administrator in our Microsoft Entra (Azure AD) tenant.

MFA is required and the only registered method was Microsoft Authenticator on a lost/reset phone.

I cannot sign in to Entra/Azure/M365 admin portals to reset security info.

Request: Please escalate to Microsoft Support Data Protection to verify ownership and reset MFA registration.

Tenant primary domain: PII removed

Tenant region/country: Australia

I can provide the affected Global Admin UPN and contact details via private message.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.