After enabling identity protection, all admins are stuck in a risky sign in loop

Question

I foolishly enabled some IP features without following guide and now my admin accounts are all locked out.

Issue appears to be that user is flagged as risky, is prompted to verify identity and reset password. however, we haven't enabled SSPR so the user then gets into a horrible loop.

Answer 1

Hi @Sheldon Dickinson • Thank you for reaching out.

If none of your Admin accounts is able to sign in to the Azure portal, it is considered as a lockout scenario. Unfortunately, in this case, there is no other option than opening a support ticket to get access to your tenant. Support team can engage the Data Protection team and will require some evidence that will prove your ownership of the Azure Account to unblock you.

You can open a support ticket using the Azure portal (if you have another Azure account) as well as by calling customer service number for your country/region. Also, please go through Manage emergency access accounts in Azure AD to configure a break-glass account so that, going forward, you don't lock yourself out.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.