Adding Account to Authenticator

Question

I am trying to access my Administrator account. We are now forced to use MFA

To access the account, I need to enter the code shown in Microsoft Authenticator. Unfortunately, the account is not in authenticator,
I try to add it to authenticator, it requires me to enter the code from Authenticator. This code is never received therefore I can not get the code,
I try to phone support and am cut off each time when i provide the email address

How can I get into my account when support end calls and authenticator needs your account to be already set up in authenticator to add it

Answer 1

Because the administrator account is already protected by Microsoft Authenticator and the app is no longer set up, this is a tenant lockout scenario. Adding the account back into Authenticator requires an MFA approval that cannot be completed, so self-service recovery is not possible.

Use the following options based on the type of account and admin situation:

1. If there is another admin in the tenant
   • Ask another Global Administrator to reset the MFA registration:
     1. Go to Microsoft Entra admin center (https://entra.microsoft.com).
     2. Navigate to Users → All users.
     3. Select the locked-out admin account.
     4. Open Authentication methods.
     5. Select Require re-register multifactor authentication.
     6. The next sign-in for that admin will prompt a fresh Microsoft Authenticator setup using a QR code.
2. If there is no other admin and this is a business/organization tenant
   • This requires Microsoft’s Data Protection team to reset MFA from the backend.
   • Call Microsoft’s global customer service and have a support ticket raised specifically to the Data Protection team for an admin MFA reset:
     • Use the numbers listed under Customer service phone numbers - Microsoft Support.
     • When the IVR or agent asks for details, clearly state:
       • The issue is with Microsoft Authenticator / MFA.
       • The product is Office 365 / Microsoft 365 for business.
       • The account is a company/organization account.
       • Confirm being the only administrator on the tenant and that you are locked out.
       • Request a service request and escalation to the Data Protection team for tenant admin MFA reset.
   • If frontline support misroutes the call, insist that this is a tenant admin lockout and only the Data Protection team can reset MFA.
3. If support keeps ending the call
   • As an alternative path, create a temporary trial tenant only to open a support ticket:
     1. Sign up for a Microsoft 365 trial tenant (e.g., from the Microsoft 365 Business/Enterprise trial page).
     2. After setup, sign in to the new tenant’s Microsoft 365 admin center (https://admin.microsoft.com).
     3. Go to Support → Help & support.
     4. Open a ticket explaining:
        • You are locked out of a different existing tenant where you are the only Global Admin.
        • Provide the locked tenant’s domain and admin UPN, and describe the MFA/Authenticator issue.
        • Ask for escalation to the Data Protection team to reset MFA on the original tenant.
     5. After the original tenant issue is resolved, cancel the trial subscription on the temporary tenant to avoid charges.
4. If this is a personal Microsoft account (Outlook.com, Hotmail, etc.)
   • The above Data Protection process in the context is specifically for business/organization tenants. For personal accounts, use the standard Microsoft account recovery and security options instead; if those fail, only Microsoft account support can assist.

Until Microsoft support/Data Protection resets MFA, the account cannot be added back into Microsoft Authenticator, and sign-in will remain blocked.

---

References:

• How to add your accounts to Microsoft Authenticator
• Sign in using Microsoft Authenticator
• Common problems with two-step verification for a work or school account
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A