Share via

I’m unable to sign in to my Microsoft admin center because of an issue with MFA

Suhaib Mohammed 0 Reputation points
2026-04-05T06:28:19.74+00:00

Hello,

I am trying to sign in to my admin account, but I am encountering an error during the verification (MFA) step.

Error details:

  • Error Code: 500121
  • Request ID: [Moderator note: personal info removed] 
  • Correlation ID: [Moderator note: personal info removed] 
  • Timestamp: 2026-04-05T05:56:37Z

I am the only administrator for this account, and this issue started occurring suddenly.

Could you please advise how I can resolve this issue and regain access to my account?

Thank you.


Move from: Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

2 answers

Sort by: Most helpful
  1. Rin-L 17,805 Reputation points Microsoft External Staff Moderator
    2026-04-05T13:41:03.9166667+00:00

    Hi @Suhaib Mohammed,

    I’m really sorry you’re running into this situation.

    The Error Code 500121 typically indicates an issue related to multi-factor authentication (MFA), often when the authentication requirement cannot be satisfied. Since this started happening suddenly and you’re the sole administrator in the tenant, there isn’t a self-service option available to recover access. I hope the guidance below helps move things forward.

    The best next step is to contact Microsoft Support by phone so the frontline team can raise a case for you and route it to the Data Protection team. You can find the correct phone number for your region here: Customer service phone numbers - Microsoft Support

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.

    Please note that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively: 

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)   

    In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:     

    What kind of problem are you experiencing?        

    Answer: Authenticator        

    What products do you use?        

    Answer: Office 365 for business        

    Is this for an education or company account?        

    Answer: For companies        

    Are you an administrator?        

    Answer: Yes        

    Are there any other administrators in your organization?        

    Answer: No. I am the only admin in my tenant         

    Do you need a... Service request?         

    Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.   

    During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.   

    If you're still unable to get through to support, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365 

    User's imageUser's image

    Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant. 

    User's imageUser's image

    Note:

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.
    • Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant.
    • The resolution time might be longer as you are contacting support from a different tenant.
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.

    I hope these steps help you create a support ticket successfully and move closer to regaining access to your administrator account. While I’m not able to intervene directly, guiding you to the right support team is the most effective help I can provide here.

    If you have any updates, please leave a comment under this post. This is the best way for me to receive notifications and follow up with you promptly.

    Thank you very much for your understanding.


    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  


  2. Q&A Assist
    2026-04-05T06:28:42.8533333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Error 500121 indicates a problem completing multifactor authentication, often due to invalid or blocked verification, missing/invalid methods, or a temporary security block.

    Since access to the Microsoft admin center is blocked at the MFA step and there is only one administrator, follow these steps:

    1. Check for temporary security blocks / unusual activity
      • Multiple failed MFA attempts or unusual sign-in patterns can cause a temporary block.
      • Wait before retrying (avoid repeated attempts that can extend the block).
      • If possible, try a different verification method (SMS, call, alternate email, or Microsoft Authenticator) or a different network, as described under “Try another method” and “Try another network.”
    2. Try another verification method (if available)
      • On the MFA prompt, select Other verification options or Sign in another way if shown.
      • Use any alternative method already configured (SMS, phone call, office phone, backup email, etc.).
      • Ensure phone numbers and methods in the account are correct when access is restored.
    3. If text/voice codes are not received
      • If SMS or voice call is configured but no code arrives, another global admin normally checks if the account is blocked or if Block sign in is enabled.
      • In this case there is no second admin, so proceed directly to Microsoft support as below.
    4. If there is another Global Administrator (if this assumption is wrong)
      • Ask that admin to sign in to the Microsoft Entra admin center and reset MFA for the affected account:
        • Go to Microsoft Entra ID → Users → All users → [your user] → Authentication methods.
        • Select Require re-register multifactor authentication.
      • Next sign-in will prompt to set up MFA again and should clear the error.
    5. If the tenant has only one Global Administrator (your case)
      Because no other admin can reset MFA and the admin center is inaccessible, recovery must go through Microsoft’s Data Protection / Tenant Recovery process: Option A – Call Microsoft global customer service
      • Call the appropriate number from Customer service phone numbers - Microsoft Support.
      • When the IVR asks for the issue, clearly state that this is an Authenticator / MFA problem for an Office 365 / Microsoft 365 for business or company account.
      • Confirm that this is a company account, that you are the administrator, and that there is no other administrator.
      • Ask to create a service request with the Data Protection team to reset MFA for the tenant admin account.
      Option B – Create a temporary trial tenant to open a ticket (if you cannot reach the right support queue)
      • Sign up for a new Microsoft 365 trial tenant (separate from the locked tenant).
      • In the new tenant, go to the Microsoft 365 admin center → Support → Help & support.
      • Open a support ticket explaining:
        • The original tenant’s domain and admin username.
        • That the only Global Administrator is locked out at MFA (error 500121).
        • That MFA must be reset by the Data Protection / Tenant Recovery team.
      • After the original tenant is recovered, cancel the trial subscription in the new tenant to avoid charges.

    Microsoft support (Data Protection team) will verify identity and administrative ownership, then reset MFA registration so a fresh MFA setup can be completed at next sign-in.


    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.