Disabling the Microsoft 2FA Verification (Authenticator App) for Admin Login into Microsoft 365 Business Admin Portal (admin.cloud.microsoft)

Question

Good Afternoon,

I would like to login to my Administration Portal using the Microsoft 365 Business Admin Portal (admin.cloud.microsoft.com). I have tried logging in with the administrative email I always use abd***@lip***.com but the Authenticator App refuses to bring a code or send a verification message/prompt to my mobile device. I have changed the password my admin email, but I still receive no response from the app. I would like to bypass it using an email address alternative but there isn't an option to do that as well. I would like help in removing the Authenticator App verification and enabling 2FA using email instead.

Answer 1

Hi Lipton Investment,

I hope you're doing well.

Based on what you've described, the next steps will depend on whether there are other administrators in your organization who can access the tenant.

If another administrator is available, I'd recommend contacting them and asking if they can reset the MFA settings for the affected account through the Microsoft Entra admin center. This is usually the quickest way to regain access.

For reference: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | …

If you're the only administrator and you've been locked out of the account, you'll need to contact Microsoft's Data Protection team for assistance. They are the only team authorized to help recover access in situations involving the sole administrator account.

You can find Microsoft's support numbers here:

Customer service phone numbers: Contact Microsoft customer support | Microsoft Support

When contacting Microsoft, be prepared to verify ownership of the subscription. You may be asked for information such as:

• Organization name
• Billing or payment information
• Registered phone number
• Alternate email address

Once your identity is verified, the privacy team will be able to reset your MFA settings. You can then reset your account in the Microsoft Authenticator app on your new device or choose a different authentication method to sign in.

Tips for navigating the IVR: 

In some countries, an automated voice system is used. Example of a dialogue:

• IVR: What problem is bothering you?
• Client: Lost access to the only admin account
• IVR: What product do you use?
• Customer: Office 365 for business
• IVR: School or Business Account?
• Client: Companies
• IVR: Are you an administrator?
• Client: Yes
• IVR: Is there another administrator in your organization?
• Client: No. I am the only admin in my tenant    
• IVR: Do you need to create a support ticket?
• Client: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

I also recommend calling during business hours. In my experience, it can be difficult to get through to the correct support queue, and automated systems don't always work as expected. If you can't get through on your first try, I suggest trying again later or at a different time.

If your organization's subscription is from a partner or reseller: Contact the reseller's support provider to help open a service request on behalf of you instead.

I hope this helps point you in the right direction. If you have any updates or additional questions, feel free to reply back and I'll do my best to assist further.

Best regards,

Answer 2

Email cannot replace Microsoft Authenticator as the MFA method for a Microsoft 365 administrator; regain access through another tenant administrator, or contact Microsoft Support for tenant recovery if this is the only administrator account.

If another administrator can sign in

Ask a Global Administrator, Privileged Authentication Administrator, or appropriately assigned Authentication Administrator to reset the affected account’s authentication methods:

1. Sign in to the Microsoft Entra admin center.
2. Go to Entra ID → Users.
3. Select the locked-out administrator.
4. Select Authentication methods.
5. Select Require re-register MFA.

This removes the account’s registered phone numbers, Authenticator registrations, and software OATH tokens. At the next sign-in, the account will be prompted to register a new allowed MFA method.^1^

If permitted by the tenant’s authentication-method policy, the administrator can also add a phone number under:

Entra ID → Users → affected user → Authentication methods → + Add authentication method

The account can then use an allowed phone method, such as SMS or voice verification, instead of relying solely on the Authenticator app.^1^

If this is the only administrator

The MFA requirement cannot be bypassed from the sign-in page when no alternative method was registered. Contact Microsoft 365 business support using the country or region contact options in the official support directory and request recovery of a locked Microsoft 365 tenant.^2^

When prompted, describe the case as:

• Product: Office 365 for Business / Microsoft 365 Business
• Account type: Company or work account
• Issue: Microsoft Authenticator unavailable; no other verification method offered
• Administrator: Yes
• Other administrators available: No
• Request: Create a service request for the Data Protection team to verify tenant ownership and reset the administrator’s authentication methods

The Microsoft Q&A tenant-lockout guidance identifies the Data Protection team as the recovery route when the sole administrator cannot complete MFA.^3^

Be prepared to provide organization and subscription information so Microsoft can verify ownership. Support cannot simply bypass identity verification or remove MFA without validating control of the tenant.

If telephone support cannot create the request, the documented Q&A fallback is to create a temporary Microsoft 365 trial tenant, sign in to that tenant’s admin center, and open Support → Help & Support, clearly stating that the request concerns recovery of a different, locked tenant. Cancel the trial afterward to prevent unintended charges.^4^

Why email is not an alternative here

For normal Microsoft Entra tenant members, email is available for self-service password reset, but it is not a secondary MFA method for administrator sign-in. Email one-time passcodes for sign-in apply to guest-user or external-tenant scenarios, not as replacement MFA for a regular Microsoft 365 administrator account.^5^

After access is restored:

• Register at least two allowed strong authentication methods.
• Create and secure two or more emergency-access accounts to prevent another tenant-wide administrative lockout.^6^
• Keep MFA enabled for administrative accounts rather than disabling it.

---

References

1. Manage user authentication methods for Microsoft Entra multifactor authentication
2. Contact Microsoft customer support
3. Unable to access my 365 admin account - Microsoft Q&A
4. I dont have access to my authenticator app to access my admin centre. What do I do? - Microsoft Q&A
5. Microsoft Entra authentication overview
6. Manage emergency access accounts in Microsoft Entra ID