Locked out of Power Apps trial tenant due to lost authenticator (No recovery options)

Question

Title: Locked out of Power Apps trial tenant due to lost authenticator (No recovery options)

Hi everyone,

I am currently stuck and looking for guidance.

I created a Power Apps trial tenant and I am the only admin/user for this account. Unfortunately, I lost my phone which had the authenticator app configured for MFA.

Now:

I can enter my username and password

But I am blocked at the MFA step

I do not have any alternate verification methods configured

The email used is not a managed corporate email, so there is no IT admin to reset MFA

I have already contacted support, but I am being redirected in a loop (asked to contact IT admin or commercial support).

At this point, I am completely locked out of my own tenant.

Is there any way to recover access or reset MFA in this scenario? Has anyone faced a similar issue?

Any help or guidance would be really appreciated.

Thank you.

Answer 1

In this scenario the tenant is effectively locked out and only Microsoft support (Data Protection team) can reset MFA for the sole admin.

Key points from similar cases:

1. When there is only one admin and that admin loses access to Microsoft Authenticator (and no alternate MFA methods are configured), self-service recovery is not possible.
2. Forum moderators and community support cannot change MFA or account details.
3. The Microsoft Data Protection team has specific tools and processes to verify identity and restore access to locked administrator accounts.

Practical steps based on the documented resolutions:

1. Contact Microsoft support by phone and get to a live agent
   Use the regional phone numbers listed under Customer service phone numbers - Microsoft Support or Find Microsoft 365 for business support phone numbers by country or region.
   • When the automated system asks for the issue, clearly state: “Authenticator” or “Multi-factor authentication lockout”.
   • When asked what product is used, answer along the lines of “Office 365 for business / Microsoft 365 for business” (Power Apps trial is backed by an Entra ID/M365 tenant).
   • Confirm that this is a company/organization account and that there are no other administrators.
2. Ask specifically for a service request and escalation to the Data Protection (DP) team
   • Explain that this is a tenant lockout: one global admin, lost phone, no other MFA methods, cannot pass MFA to sign in.
   • Request that the case be escalated to the Data Protection team to reset MFA for the admin account.
3. Be ready to provide verification details
   The DP team will typically verify identity and tenant ownership (business details, domain, billing/registration info, contact details, etc.).
   Expect some back-and-forth and that resolution may take several days, as shown in the referenced cases.
4. If support keeps redirecting
   • Call again and follow the prompts carefully to avoid being routed to “IT admin” or “self-help only” flows.
   • Ask the agent to escalate to a duty manager if needed and clearly state that this is a single-admin tenant lockout due to MFA and that only DP can help.
   • If the tenant was created via a partner/reseller, that partner can also open a support ticket on behalf of the tenant.
5. Optional: create a temporary trial tenant only to open a ticket
   If absolutely unable to open a support request from the locked tenant, one documented workaround is:
   • Create a new Microsoft 365 trial tenant (separate from the locked one).
   • Go to the Microsoft 365 Admin Center → Support → Help & support in this new tenant.
   • Open a ticket explaining that the issue is with a different, existing tenant where access is lost, and provide:
     • Admin UPN of the locked tenant
     • Tenant domain name
     • Error messages and description of the MFA lockout
     • Confirmation that this is the only global admin.
       This trial tenant is just a channel to reach support; it will not give access to data in the locked tenant.

Once the Data Protection team verifies identity, they can reset/re-register MFA for the admin account so that access to the Power Apps trial tenant is restored. After recovery, configure multiple MFA methods (e.g., Authenticator plus phone/SMS and a break-glass admin account) to avoid future lockouts.

---

References:

• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Azure has blocked myphone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A
• Preventing tenant lockouts
• Use a screen reader to set up and troubleshoot multifactor authentication
• Common problems with two-step verification for a work or school account