I am locked out of my Azure / Entra tenant

Question

I am locked out of my Azure / Entra tenant because MFA is required and I cannot access Authenticator. I am the only admin. I need this case escalated to the Microsoft Data Protection team for tenant ownership verification and MFA reset.

Answer 1

Because multifactor authentication is required, there is no access to Microsoft Entra or the Azure portal to self-reset MFA, and there are no other admins in the tenant, this is a tenant lockout scenario that must be handled by Microsoft’s Data Protection team.

Follow these steps to proceed:

1. Contact Microsoft support by phone and request Data Protection
   • Call the appropriate regional support number listed under Customer service phone numbers - Microsoft Support.
   • When prompted by the IVR/agent, clearly state:
     • The issue is a tenant lockout.
     • MFA is required and the only registered method (Microsoft Authenticator) is unavailable.
     • There are no other global administrators in the tenant.
     • A Data Protection / Tenant Recovery case is needed for tenant ownership verification and MFA reset.
2. If frontline support routes incorrectly, insist on Data Protection
   • Confirm that this is a commercial / work account (Azure / Microsoft 365 for business) and that the caller is the only tenant admin.
   • Ask specifically to be transferred to the Microsoft 365 Data Protection team or Azure Data Protection team for tenant recovery.
3. If unable to reach an agent, use an alternate tenant to open a ticket
   • As an alternative, create a new Microsoft 365 trial tenant.
   • From that new tenant’s admin center, open a support ticket requesting assistance from the Data Protection team to recover access to the original locked tenant (tenant lockout, single global admin, MFA reset required).

Once the Data Protection team validates tenant ownership, they can reset the admin credentials and/or MFA registration so that access to the original tenant can be restored.

---

References:

• Troubleshoot sign-in issues and account access problems
• Preventing tenant lockouts
• Discover your Microsoft cloud footprint FAQ
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
• Manage user authentication methods for Microsoft Entra multifactor authentication
• Common problems with two-step verification for a work or school account
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Planning for mandatory multifactor authentication for Azure and other admin portals