Azure Portal stuck on Authenticator approval for personal Pay-As-You-Go account

Question

I am facing the on a personal Microsoft account with an Azure Pay-As-You-Go subscription.

My Microsoft account itself is working:

• I can sign in to Outlook via authenticator app but not for azure portal
• I can sign in to my Microsoft account security page

But Azure Portal is blocked at MFA.

Azure shows the number-matching approval screen and asks me to approve the sign-in in Microsoft Authenticator, but no approval prompt arrives in the app.

What I already tried:

• deleted and re-added Microsoft Authenticator
• re-added my personal Microsoft account in the app
• checked account security methods
• turned two-step verification off for testing
• tried private/incognito browser
• cleared cache/history
• reset password

None of this fixed Azure Portal access.

From this thread, I understand the likely cause is that Azure is still linked to a stale/corrupt Authenticator registration. The work/school admin reset path mentioned above does not apply to my case because this is a personal Microsoft account, and the security/admin pages for work or school accounts do not accept personal accounts.

I have already spent several hours trying to recover access and have also contacted Microsoft support, but I am still blocked.

Could someone from Microsoft please confirm the exact support path or backend reset needed for personal Microsoft accounts with Azure Pay-As-You-Go subscriptions when Azure MFA is stuck on an old Authenticator registration

This is a personal Microsoft account. I do not have access to Azure Portal, so I cannot view any tenant or directory settings. Please check the tenant/directory linked to my personal Azure Pay-As-You-Go subscription and reset the stale MFA registration from your side

Answer 1

Dear @Sam,

Good day! Welcome to Microsoft Q&A forum!

Based on your description, I understand that you’re unable to access the Azure Portal for your personal Microsoft account with a Pay-As-You-Go subscription because MFA is stuck on an old Microsoft Authenticator registration. Although your Microsoft account works for Outlook and security pages, Azure sign-in never delivers the approval prompt. You’ve already tried common recovery steps and are seeking confirmation of the correct Microsoft support or backend reset process to clear the MFA registration for a personal account.

Regarding your situation, error 500121 means the login failed during multi-factor authentication (MFA). This usually happens if the user didn’t complete the MFA prompt, timed out, or there’s a problem with how MFA is set up, like a misconfiguration or service issue. Also, this involves business (Azure) MFA because Azure authentication is handled through Azure Active Directory / Entra, which is part of Microsoft’s business infrastructure, even when the subscription is Pay‑As‑You‑Go and tied to a personal Microsoft account.

Please note that this is a community forum where users help one another. We do not have control over user accounts, including login issues, password resets, or access changes.

Therefore, you need to involve Microsoft Data Protection Team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support (Scroll down for Business users)  

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.  

Answer: Authenticator.  

A: What products do you use?  

B: Azure  

A: Are you an administrator?  

B: Yes.  

A: Are there any other administrators in your organization?  

B: No.  

A: I need one.... Service request?  

B: Yes  

(Important Note: Sometimes, you would hear the computer-generated voice at first, please kindly wait for it to end, and if an agent is available, you would be directed to them and get your support. Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "You can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.) 

As an alternative, you can create a new tenant account and submit your request from there.    

To set up a new tenant, please follow these steps: 

• Visit Compare Office 365 Enterprise Pricing and Plans | Microsoft 365, choose any plan and click try for free to start a free trial.    
• Follow the guided setup process to create a new account for a new tenant. 

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In the ticket's description, you could refer to this message "Hello

I am currently unable to access the Azure Portal for my personal Microsoft account because Azure multi-factor authentication is enforced and stuck on an old Microsoft Authenticator registration. The approval prompt never reaches my Authenticator app, which prevents me from completing sign-in.

This account is linked to an active Azure Pay‑As‑You‑Go subscription, and I do not have access to the Azure Portal or any tenant or directory settings to resolve this myself. I have already attempted all available self-service recovery steps without success.

To resolve this, I have created a new tenant and would like to be connected with the Data Protection Team to verify my identity and assist with regaining access. I am available to provide any required documentation or verification to support the recovery process."

Ticket Support: Log in the Microsoft 365 Admin Center using your newly created trial admin account > Support > Help & Support. You can raise support ticket at: https://admin.microsoft.com/#/support/requests

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful.

I'm here and happy to help! Thank you for your kindness and patience!

---

If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

`Hi @Julie Huynh
Good day, and thank you very much for your response.

Your answer was the only thing that truly helped me move forward with this issue. The day before yesterday, I spent more than 3 hours trying to resolve it—searching online and going through community forums—but I couldn’t find anything that guided me in the right direction or helped me reach the appropriate support channel.

The key insight you provided made a big difference. Even though I am using a personal Microsoft account, it is being treated as a business account in Azure. Because of this, I kept selecting “home user” support options, which only led to automated responses and calls being disconnected. After following your suggestion and choosing the business support path, I was finally able to connect to a real support agent and raise a support ticket—something I could not do myself since I cannot access the Azure Portal with this account.

My issue is not fully resolved yet, but my main concern now is related to the Pay-As-You-Go model. If any resources are running in my account, I currently have no way to stop them, which could lead to unexpected charges.

I strongly feel that your answer should be turned into an official guideline by Microsoft. Many users who create Azure accounts with personal emails may face the same confusion and have no clear documentation to guide them. In my experience, reaching support was very difficult, and even when I did, some agents were not able to handle Azure-related issues, which was quite disappointing.

Once again, thank you for your help—it truly made a difference.

Kind regards,