Azure Portal forces 6‑digit MFA and I cannot access my subscription (personal account treated as work account)

Kenny Yang 0 Reputation points
2026-06-04T06:28:21.5033333+00:00

I’m unable to sign in to the Azure Portal using my personal Microsoft account. Azure keeps forcing a work/school sign‑in and asks for a 6‑digit Authenticator code, but my personal account only uses the 8‑digit code. This creates an endless MFA loop where I can’t log in, can’t switch directories, and can’t open a support ticket from the portal.

I can sign in to all other Microsoft services normally. Only Azure routes my personal account into the wrong authentication flow, possibly because it was accidentally associated with an Azure AD tenant.

Request: How can I get my personal Microsoft account detached from any Azure AD directories so Azure stops treating it like a work account? I just want to restore normal consumer‑account login and access my Azure subscription.

Thanks! @Anonymous

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
  1. AI answer

    2026-06-04T06:28:45.8266667+00:00

    The personal Microsoft account is almost certainly a guest user in an Azure AD (Microsoft Entra ID) tenant, and that guest account’s MFA profile is stuck or misconfigured. Azure is therefore enforcing tenant MFA (6‑digit codes / push) instead of the consumer 8‑digit flow.

    The only supported way to fix this, based on the provided material, is for a tenant administrator to reset MFA for the affected account from within Microsoft Entra ID. The account cannot “self‑detach” from the tenant or reset this tenant‑side MFA on its own.

    Required actions:

    1. Sign in with another account that has Global Administrator rights in the tenant where the personal account is a guest.
    2. In the Microsoft Entra admin center, go to:
      • Identity → Users → All users
      • Locate and select the affected personal Microsoft account (the guest user object).
    3. Open Authentication methods for that user.
    4. Select Require re‑register multifactor authentication.
    5. Sign out and then sign in again with the personal Microsoft account; Azure will prompt to register MFA again for that tenant. Complete registration with a working method (e.g., Microsoft Authenticator push or the correct code type).

    This clears the stuck tenant MFA profile and restores the ability to complete sign‑in and access the Azure subscription associated with that account. If there is no other Global Administrator in the tenant (or the only Global Admin is locked out), the case must be escalated to Microsoft Support (Data Protection / Tenant Recovery) by Microsoft staff so they can verify ownership and reset MFA/restore access on the tenant side.

    There is no documented, self‑service way in the provided material to “detach” the personal account from all Azure AD directories; resolution is through an admin‑initiated MFA reset or a support‑initiated tenant recovery/MFA reset.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.