Sole owner of tenant external id locked out due to MFA

Question

Sole owner of tenant external id locked out due to MFA

Gabriel Silva 5

I am the sole owner of a external ID tenant in ENTRA. Cannot login due to Authenticator app being cleared, and there are no other authentication methods. I can still access other tenants, including the tenant that is owner of the subscription group that has the external tenant created. However, there is no way to reset MFA without any admin accessing the external tenant.

Gledhill, Ronald 70 Reputation points

2026-04-01T18:35:08.3166667+00:00

Hello Gabriel!

It's because Microsoft Entra External ID tenants operate as separate identity boundaries, administrative access in a parent tenant or subscription does not grant the ability to reset multi-factor authentication for accounts inside the External ID tenant. When the only Global Administrator loses access to the Microsoft Authenticator app and no alternate authentication methods (such as phone, FIDO key, Temporary Access Pass, or secondary admin account) are configured, there is no self-service recovery option available through the portal. The only supported resolution is to open a Microsoft support request from another tenant you can still access, such as the tenant associated with the Azure subscription that created the External ID tenant, and request an MFA reset or reactivation of administrative access. Microsoft support will verify ownership of the tenant using details such as the tenant domain name, administrator UPN, subscription information, billing relationship, and other identifying data before enabling access again. Once access is restored, it is recommended to configure at least two emergency Global Administrator accounts with separate authentication methods so that future MFA device loss does not result in a full administrative lockout.

Hope that helps or need more detail let me know.

-Ron
Rukmini 36,695 Reputation points Microsoft External Staff Moderator

2026-04-01T18:36:12.4066667+00:00

Hello Gabriel Silva

Please share the details over the private messages so that we can assist you further.