Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
The 8‑digit code in Microsoft Authenticator does not match what Azure is currently expecting for this sign‑in, so the existing MFA registration is effectively out of sync and must be reset.
Because sign‑in cannot complete, the fix is to have the Azure/Microsoft 365 tenant admin reset the MFA registration for this account so that it can be re‑registered and start generating the correct type of code (or use push notifications instead of codes).
Use the following path, depending on whether there is another admin in the tenant:
- If there is another Global Administrator in the tenant
- That admin signs in to the Microsoft Entra admin center.
- Go to Identity → Users → All users.
- Select the affected user (the Gmail‑based account).
- Open Authentication methods.
- At the top, select Require re‑register multifactor authentication.
- Next time sign‑in is attempted with this account, Azure will prompt to set up MFA again in Microsoft Authenticator. Complete the wizard and use the new method (push notification or the new code shown in the app).
- If there is no other Global Administrator (only this locked‑out account)
In this case, MFA reset must be handled by Microsoft’s Data Protection/Tenant Recovery process:
- Call Microsoft using the regional number from Customer service phone numbers - Microsoft Support.
- When the IVR asks what the problem is, clearly state that this is an Authenticator / MFA lockout for a Microsoft 365 for business / Azure tenant and that this is the only Global Administrator.
- Ask the agent to create a service request and escalate to the Data Protection team (or Tenant Recovery) to reset MFA / security info for the admin account.
- Complete their identity‑verification steps. Once they reset MFA, sign in again and re‑register Microsoft Authenticator from scratch.
After MFA is reset and re‑registered, Azure will accept the new verification method (push or the new OTP format) and access to the Azure account will be restored.
References: