A cloud-based identity and access management service for securing user authentication and resource access
The personal Microsoft account is almost certainly a guest user in an Azure AD (Microsoft Entra ID) tenant, and that guest account’s MFA profile is stuck or misconfigured. Azure is therefore enforcing tenant MFA (6‑digit codes / push) instead of the consumer 8‑digit flow.
The only supported way to fix this, based on the provided material, is for a tenant administrator to reset MFA for the affected account from within Microsoft Entra ID. The account cannot “self‑detach” from the tenant or reset this tenant‑side MFA on its own.
Required actions:
- Sign in with another account that has Global Administrator rights in the tenant where the personal account is a guest.
- In the Microsoft Entra admin center, go to:
- Identity → Users → All users
- Locate and select the affected personal Microsoft account (the guest user object).
- Open Authentication methods for that user.
- Select Require re‑register multifactor authentication.
- Sign out and then sign in again with the personal Microsoft account; Azure will prompt to register MFA again for that tenant. Complete registration with a working method (e.g., Microsoft Authenticator push or the correct code type).
This clears the stuck tenant MFA profile and restores the ability to complete sign‑in and access the Azure subscription associated with that account. If there is no other Global Administrator in the tenant (or the only Global Admin is locked out), the case must be escalated to Microsoft Support (Data Protection / Tenant Recovery) by Microsoft staff so they can verify ownership and reset MFA/restore access on the tenant side.
There is no documented, self‑service way in the provided material to “detach” the personal account from all Azure AD directories; resolution is through an admin‑initiated MFA reset or a support‑initiated tenant recovery/MFA reset.
References: