Tenant Lockout

Renzi, Fabrizio 0 Reputation points
2026-01-28T10:02:10.99+00:00

I am the sole Global Administrator and the only user of my Microsoft 365 tenant. My Microsoft Authenticator app does not let me configure the account unless I autheticate it first, creating an infitinte loop of requests. I am basically locked out of my tenant and I can't do anything without authetication and authentication via the app (or code from the app) is not possible. I do not get any other option (like use a password) nor any recovery option.

I cannot even log in on my account and open a dedicated request so I am using my personal account to write this message.

My tenant domain and user account: [Moderator note: personal information removed]@bigbi.eu

Thank you for your support

Microsoft Security | Microsoft Authenticator
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Q&A Assist
    2026-01-28T10:02:24.84+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    To regain access to your Microsoft 365 tenant as the sole Global Administrator, you will need to contact Microsoft support directly since you are currently locked out due to the Multi-Factor Authentication (MFA) requirement. Here are the steps you can follow:

    1. Contact Microsoft Data Protection Support by Phone: You can reach out to the Global Customer Service phone number to request a reset of your authentication method. Make sure to explain that you are the only admin and have lost access to your account. This should help you connect with the appropriate team to resolve your issue.
    2. Use a Temporary Account: If you cannot reach a live agent, consider creating a temporary account by signing up for a trial subscription. This will allow you to access the admin console of the new tenant and submit a support ticket requesting assistance with your original tenant.
    3. Follow Call Prompts: When you call support, follow the prompts carefully to ensure you reach the Data Protection team. For example, when asked if you are an administrator, confirm that you are, and state that you need to create a service request.

    These steps should help you regain access to your account and resolve the authentication issue with the Microsoft Authenticator app.


    References:

    0 comments No comments

  2. Liora D 10,570 Reputation points Microsoft External Staff Moderator
    2026-01-28T12:05:52.02+00:00

    Dear @Renzi, Fabrizio,

    Welcome to Microsoft Q&A. 

    Thank you for sharing the details of your situation. I understand how stressful it is to be locked out of your only Global Administrator account, especially when the Microsoft Authenticator keeps looping and you cannot complete the sign‑in.

    Based on your description, the issue is caused by the fact that you are the sole Global Administrator of the tenant, and your account now requires MFA approval, but no alternative authentication method is available.

    Please note that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc. 

    Therefore, if you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

    In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with. 

    Answer: Authenticator. 

    A: What products do you use? 

    B: Office 365 for business. 

    Verification: Education or company account? 

    B: For companies 

    A: Are you an administrator? 

    B: Yes. 

    A: Are there any other administrators in your organization? 

    B: No. 

    A: I need one.... Service request? 

    B: Yes 

      If your organization's Office 365 Business/Education subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead. 

     

    If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Compare All Microsoft 365 Plans | Microsoft. This would allow you to create a new tenant following the provided prompts. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.  

    Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.  

    I understand that this entire process can feel long and complicated, and I truly appreciate your patience while working through it. These steps are in place to protect the security of your account, so I hope you can understand why they are required. I sincerely hope you’ll be able to regain access to your account soon. If you need help at any point, or if you have any questions during the process, please feel free to reach out, I’m always here and happy to assist.  

    Thank you again for your understanding and patience. 

    Warm regards, 


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.   

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.