Problems with Microsoft Authenticator

Question

I am the sole global administrator of my Microsoft 365 Business account. And this account in Microsoft Authenticator doesn't receive push notifications, doesn't show a request code, nor the 8-digit code. I would like to know how I can fix this.
For some reason, I can still access services like Outlook and Copilot normally, but if I try to log into another one, it asks me to enter the 2-digit code in the Microsoft authenticator, but no notification appears in the app and sometimes the message "Error searching for notification" appears.
I can't even contact support because it requires this to be done in the Microsoft 365 admin panel, but to access the panel I have to log in.

Answer 1

Hi @Luiz Gabriel,

Thank you for your question regarding the problem you are experiencing with accessing your admin account.

This issue may be related to Multi‑Factor Authentication (MFA) being required for the Microsoft 365 business account while the associated authentication method was not available during the login attempt. Based on common scenarios, this can occur when changes are made to the Microsoft Authenticator app or the mobile device used for verification, such as reinstallation, device replacement, or removal of the work account, particularly if limited or no alternative verification methods are configured.

You may nevertheless still be able to access services such as Outlook or Copilot because those sessions were authenticated previously and are relying on existing sign‑in tokens, which can remain valid for a period of time without requiring MFA again. However, if a new sign‑in or access to a different service is required, the system may prompt for MFA, and if the associated authentication method is unavailable, the sign‑in attempt may not be completed successfully.

With that in mind, to move toward a resolution, I suggest the following options:

---

Option 1: Contact Microsoft Data Protection Support by phone (Please proceed with the second option if contacting phone support is not applicable to your situation)

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to the Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues but we’ll continue doing our best to support you within the scope of our responsibilities.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

IVR: What kind of problem are you concerned about?

You: Authenticator.

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

IVR: Do you need a... Service request?

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

---

Option 2: Create a new tenant to submit a support ticket (Alternative method)

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. (please select "Try for free" under a business subscription).

When prompted, enter your email. You can use your personal email or create a new Microsoft personal account for this step. Then select Set up account to move forward.

From this step, the system should guide you through creating your tenant and assign you a default onmicrosoft.com domain.

Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

To create a support ticket: In the Microsoft 365 admin center > Help & Support.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the only global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

It is important to note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn.

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.

If you find my post useful, kindly consider upvoting it. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.

Thank you for your kindness and contributions to the forum.

---

If the answer is helpful, please click "Accept Answer". If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in this documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

For a sole global administrator who cannot complete MFA because Microsoft Authenticator is not showing or receiving approval requests, the issue must be handled as a tenant lockout and escalated to Microsoft’s Data Protection team. Standard self-service fixes (like re-registering MFA from the admin portal) are not possible because access to the portal itself is blocked by MFA.

Use these steps and options:

1. Basic Authenticator checks (only if some notifications work)
   • Ensure the device clock is set to automatic and correct, then restart the device. Incorrect time can cause expired notifications and codes.
   • Confirm the phone is not in Do Not Disturb/Quiet mode and that notifications are enabled for Microsoft Authenticator in the device’s Settings.
   • Verify other apps can receive notifications; if not, fix network/notification channel issues at OS level.
   • If some accounts in Authenticator receive notifications but this admin account does not, remove just this problematic account from the app and add it again, allowing notifications during setup. If removal would lock out completely, skip this and proceed to recovery.
   Relevant behaviors and checks are described under “No Microsoft Authenticator notifications when the app is closed” and “Microsoft Authenticator notifications always expired.”
2. If push still fails and MFA blocks admin access (tenant lockout) Because this is the only global admin and MFA is blocking access to the Microsoft 365 admin center, the recovery must be done by Microsoft’s Data Protection team. They can verify identity and reset MFA methods for the tenant admin. Use one of these options: Option A – Call Microsoft Support and request Data Protection
   1. Call the regional Microsoft Customer Service phone number listed under “Customer service phone numbers - Microsoft Support.”
   2. When interacting with the IVR/agent, clearly state:
      • The problem is with “Microsoft Authenticator” and MFA.
      • The product is “Office 365/Microsoft 365 for business.”
      • The account is a company (work) account.
      • The caller is the global/only administrator and is locked out due to MFA.
      • A service request is needed and must be routed to the Data Protection team to reset the admin’s MFA.
   3. Be prepared to provide tenant and admin details (admin sign-in address, tenant domain, error messages, and confirmation that there is no other global admin).
   This is the same path used in the referenced tenant-lockout and “only admin” scenarios. Option B – Create a temporary trial tenant to open a ticket If reaching the correct support queue by phone is difficult:
   1. Sign up for a new Microsoft 365 trial tenant (any business/enterprise trial plan) using a different account.
   2. In that new tenant, go to the Microsoft 365 admin center and open a support request.
   3. In the ticket, explain that the real issue is with a different, existing tenant where the requester is the only global admin and is locked out by MFA, and request escalation to the Data Protection team.
   4. Provide the locked tenant’s admin UPN, tenant domain, and MFA error details.
   5. After the original tenant is recovered, cancel the trial subscription in the temporary tenant to avoid charges.
3. If there is any other global admin in the tenant If at any point it is discovered that another global admin exists and can sign in, that admin can:
   • Require re-registration of MFA for the affected admin account so that the Microsoft Authenticator app can be set up again from scratch. This is the standard fix when another admin is available.
4. If repeated sign-in attempts start failing entirely If multiple failed MFA attempts trigger protection and sign-in is temporarily blocked, wait before trying again or use an alternate MFA method if one is still working. If malicious activity is suspected, the tenant’s IT admin (once access is restored) should review Microsoft Entra sign-in logs.

In summary, with a single global admin blocked by a malfunctioning Authenticator and no portal access, the only supported way to fully fix MFA for that account is to work with Microsoft Support/Data Protection so they can verify identity and reset the admin’s MFA from their side.

---

References:

• Troubleshoot problems with Microsoft Authenticator
• Common problems with two-step verification for a work or school account
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A