How to reset MFA for my Global Admin account when Microsoft Authenticator is lost

Question

Hi Team,

I am the Global Administrator of my Microsoft Entra ID (Azure AD) tenant, and I have lost access to my Microsoft Authenticator app on my old phone.

Because MFA was enabled and Microsoft Authenticator was my only configured method, I am now completely locked out of my Global Admin account. I cannot approve sign-in requests, and the system does not give me any alternative MFA options.

I tried:

• Signing in from multiple browsers
• “I don’t have my Authenticator” option
• Self-Service Password Reset (SSPR)

But all these still ask me for Authenticator approval, which I can’t access.

I do not have a second Global Admin or break-glass account in the tenant, so I cannot reset the authentication methods myself.

Could you please advise on how to reset or remove MFA for a Global Admin when the Authenticator app is lost and no other MFA method exists?

If needed, I can provide:

• Proof of domain ownership
• Subscription billing details
• Organization verification
• Any identity confirmation required for admin recovery

I need guidance on the correct process or escalation steps to recover my Global Admin access.

Thank you.Hi Team,

I am the Global Administrator of my Microsoft Entra ID (Azure AD) tenant, and I have lost access to my Microsoft Authenticator app on my old phone.

Because MFA was enabled and Microsoft Authenticator was my only configured method, I am now completely locked out of my Global Admin account. I cannot approve sign-in requests, and the system does not give me any alternative MFA options.

I tried:

• Signing in from multiple browsers
• “I don’t have my Authenticator” option
• Self-Service Password Reset (SSPR)

But all these still ask me for Authenticator approval, which I can’t access.

I do not have a second Global Admin or break-glass account in the tenant, so I cannot reset the authentication methods myself.

Could you please advise on how to reset or remove MFA for a Global Admin when the Authenticator app is lost and no other MFA method exists?

If needed, I can provide:

• Proof of domain ownership
• Subscription billing details
• Organization verification
• Any identity confirmation required for admin recovery

I need guidance on the correct process or escalation steps to recover my Global Admin access.

Thank you.

Answer 1

Hello @Laboratorio,

I'm sorry to hear that your only Global Administrator account is locked out.

I’d like to clarify that I don't represent Microsoft, I do not have access to user sign-in logs, cannot reset MFA, revoke access, or contact Microsoft Support/Data Protection Team on your behalf. Please consider me an end user as well, providing guidance based on experience and documented processes.  

To help, I'd like to share the prompt that has successfully helped many other users reach the Data Protection Team and create a support request:

1. Find the related hotline number for your country to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

2. Depending on your country or region:

For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

For some countries, it will be an automated conversation like:    

• First, when you call the hotline, it asks what kind of problem you are worried about.   
• Answered: authenticator.   
• A: What kind of product are you using?   
• B: Microsoft 365 for business.   
• A confirmation: education or company account?   
• B: For companies   
• A: Are you an administrator?   
• B: Yes.   
• A: Do you have the other admin in your organization?   
• B: No.   
• A: You need one.... Service request?   
• B: Yes   

Important note:

• You may need to call multiple times before you are connected to a live support representative and can successfully create a support request with a ticket number for tracking. 
• If your subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead.   
• If calling the support line in your region is difficult, you may try another regional support number that offers service in your language, or contact the English support line if you’re comfortable speaking English. 

If you encounter any difficulties in contacting the frontline support, please feel free to let me know. Thank you and I wish you a great day!