Unable to access Azure due to MFA lockout on personal Microsoft account

Question

Hello, I am facing an urgent issue with my personal Microsoft account that is tied to my MCT benefits and Azure subscription.

• I can successfully sign in to my Microsoft account (Outlook/Services).
• However, when accessing the Azure Portal, I am blocked by MFA.
• My authenticator device was lost, and the “Sign in another way” option does not provide SMS or email verification.
• I am the Global Administrator for my Azure tenant, and currently unable to manage resources or access MCT benefits.

Details:

• Name: Manosh N
• MCID: 990388575
• Associated Email: ******@gmail.com
• Location: Bengaluru, India

I need assistance to escalate this to the Identity Protection Team so that my MFA requirements can be reset. This will allow me to register a new authentication device and regain access.

Any guidance on how to reach the correct support channel or escalate this issue would be greatly appreciated.

Best regards, Manosh NHello,

I am facing an urgent issue with my personal Microsoft account that is tied to my MCT benefits and Azure subscription.

• I can successfully sign in to my Microsoft account (Outlook/Services).
• However, when accessing the Azure Portal, I am blocked by MFA.
• My authenticator device was lost, and the “Sign in another way” option does not provide SMS or email verification.
• I am the Global Administrator for my Azure tenant, and currently unable to manage resources or access MCT benefits.

Details:

• Name: Manosh N
• MCID: 990388575
• Associated Email: ******@gmail.com
• Location: Bengaluru, India

I need assistance to escalate this to the Identity Protection Team so that my MFA requirements can be reset. This will allow me to register a new authentication device and regain access.

Any guidance on how to reach the correct support channel or escalate this issue would be greatly appreciated.

Best regards,
Manosh N

Answer 1

Because access to the Azure portal is blocked by MFA and there is no alternative method (SMS/email) configured, and you are the only Global Administrator, this is a tenant lockout scenario that must be handled by Microsoft’s Data Protection / Identity team via a support ticket.

From the documented and Q&A patterns for similar cases, the path is:

1. If there is another Global Administrator in the tenant
   • That admin signs in to the Azure portal.
   • Goes to Microsoft Entra ID → Users → your user account → Authentication methods.
   • Selects Require re-register multifactor authentication.
   • Next time you sign in to Azure, you will be prompted to set up MFA again on a new device.
2. If you are the only Global Administrator (your case)
   • This must be escalated to Microsoft’s Data Protection / Tenant Recovery team through a support request.
   • Forum moderators and community cannot reset MFA or access your account; only Microsoft support can do this after verifying identity and tenant ownership.
   The documented options to reach them are:
   • Call Microsoft support using the regional customer service phone number and clearly state that:
     • This is an Authenticator / MFA lockout issue.
     • The account is for Office 365/Azure for business.
     • It is a company/organization account.
     • You are the only Global Administrator and are locked out due to lost authenticator and no other MFA methods.
     • Request a service request and escalation to the Data Protection / Identity team to reset MFA registration for the admin account.
   • If direct phone support is difficult to reach, one documented workaround is:
     1. Create a new, temporary Microsoft 365 trial tenant (separate from your locked tenant).
     2. Sign in to the Microsoft 365 Admin Center of this new tenant.
     3. Go to Support → Help & support and open a support ticket.
     4. In the ticket, clearly explain that:
        • You are locked out of a different, existing Azure/M365 tenant where you are the only Global Admin.
        • Provide the admin UPN, tenant domain, and error/MFA details.
        • Ask for escalation to the Data Protection / Tenant Recovery / Identity Protection team to reset MFA for that admin account.
     5. After the original tenant issue is resolved, cancel the trial subscription for the temporary tenant to avoid charges.

Once the Data Protection/Identity team verifies your identity and ownership, they can clear or reset the MFA registration, after which you can sign in again and register a new authenticator device.

---

References:

• I need to reset my mfa methods - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• Use a screen reader to set up and troubleshoot multifactor authentication
• Common problems with two-step verification for a work or school account
• Troubleshoot Azure Multi-Factor Authentication issues
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication