Multi-Factor Authentication (MFA) does not work for me. I am admin

Question

I need access to admin.microsoft.com. When I try to log in, Multi-Factor Authentication (MFA) kicks in, but I cannot complete the process as my Outlook app does not give me screen to enter the 2 digit code. Same with Microsoft Authenticator.

Answer 1

Hi Gaston Beaumier ,

Please try restarting your devices. Sometimes, this helps refresh the Authenticator application and ensures everything works properly.

You can refer to the information provided by the AI, and if you have any further questions, please feel free to post back.

Answer 2

Select Sign in another way on the MFA page and use any previously registered method; if none works, another administrator must reset your MFA registration, or Microsoft Support must recover the tenant if you are the only administrator.

1. Try an existing sign-in method

1. On the Microsoft 365 sign-in page, select Sign in another way, Other verification options, or I can’t use my Microsoft Authenticator app right now.
2. Select a method already registered to your account, such as SMS, voice call, security key, or one-time passcode.
3. If Use a code is offered for Outlook mobile:
   • Open Outlook mobile.
   • Go to Home → Settings → Accounts → your work account → Sign-in requests.
   • Copy the current code and enter it on the sign-in page. The code refreshes every 30 seconds. ^1^

Do not remove or reinstall the apps while locked out; re-registering them can require the same MFA approval that is currently unavailable.

For normal number matching, the browser displays a two-digit number and the Authenticator notification provides the field for entering it. When signing in to Outlook on the same phone, the experience can instead show Approve/Deny. Authenticator must be current because older versions that do not support number matching cannot complete authentication. ^2^

2. If another administrator can access the tenant

Ask another Global Administrator or suitably privileged authentication administrator to reset your MFA registration:

1. Sign in to the Microsoft Entra admin center.
2. Go to Entra ID → Users.
3. Select your administrator account.
4. Open Authentication methods.
5. Select Require re-register MFA.
6. Confirm the action.

This removes the registered phone numbers, Authenticator registrations, and software OATH tokens from the affected account. At your next sign-in, you will be required to register a new method. ^3^

3. If you are the only administrator

You cannot bypass MFA or reset your own inaccessible method. Contact Microsoft 365 business support by phone and request an account-access case for the Microsoft 365 Data Protection team. Use the current regional number from Microsoft’s support page and have your organization and subscription details ready. Microsoft may verify access using contact information registered in the Microsoft 365 organization profile. ^4^

Explain clearly:

• You are locked out of admin.microsoft.com.
• The MFA push reaches neither Outlook nor Authenticator with a usable approval screen.
• Whether you are the tenant’s only Global Administrator.
• You need the authentication methods reset after ownership verification.

Sole-administrator MFA lockouts require Microsoft support when no other administrator or appropriately authorized partner can restore access. ^5^

After access is restored

• Register at least two independent authentication methods.
• Keep a separate privileged authentication administrator available for lockout recovery. Microsoft recommends having this role because another Global Administrator or Privileged Authentication Administrator can reset a locked-out Global Administrator. ^6^
• Configure emergency-access accounts for tenant-wide lockout scenarios.

---

References

1. [Personal](https://support.microsoft.com/accounts-billing/security/using-outlook-mobile-to-sign-in)
2. How number matching works in MFA push notifications for Authenticator - Authentication methods policy
3. Manage user authentication methods for Microsoft Entra multifactor authentication
4. Get support for Microsoft 365 for business
5. Preventing tenant lockouts
6. About administrator roles in the Microsoft 365 admin center