Lost access to the Azure portal after enabling MFA on admin account

Question

Lost access to the Azure portal after enabling MFA on admin account

Nico Just 20

I have an old "@live.de" email account with MFA enabled, which I used to log in to the Azure portal. That account is the only account in my tenant. Since I received multiple mails "Enable multifactor authentication for your tenant.." I checked my EntraID users, which contains only the above mentioned user with the "@live.de" address, but that list stated that MFA is disabled for that account. I tried to enable MFA, but nothing happened. After trying to log on to the Azure portal again, I get prompted for my MFA code twice, where the first code is accepted, but the second code gives me an error code: 500121. I still have access to that account, but I cannot access the Azure Portal anymore.

Nico Just 20 Reputation points

2025-10-02T10:13:32.8066667+00:00

Please help! I can provide my TenantID, billing information, phone numbers, email etc. to prove I am the admin of that tenant. I'm using my Azure account mainly for Azure Trusted Signing, so it's cruical for me to regain access to my account.
Anonymous

2025-10-06T11:28:08.17+00:00

Hi Nico,

Thanks for reaching out to Microsoft Q&A!

Based on your description, you’re experiencing an issue with your @live.de account, where you have MFA enabled and are unable to access the Azure portal, even though you still have access to the account itself. The error AADSTS500121 typically indicates that the MFA requirement could not be satisfied or there’s a configuration mismatch in the authentication process.

Typically, another Global Administrator can assist in re-registering MFA on a new device. However, if you're the sole Global Administrator in the tenant, this situation qualifies as a tenant lockout.

To resolve this, it's necessary to engage Microsoft’s Data Protection team by raising a support ticket. They will be able to help restore access to your account.

To move forward, I’ll need a few details from you. As the information includes Personally Identifiable Information (PII), please share the requested details securely via private message.

Thanks
Nico Just 20 Reputation points

2025-10-28T17:05:30.29+00:00

Hi,

I'm writing to follow up on this issue, as it is still not resolved.

I sent the required information via DM, but there has been no reply since October 9, 2025. I also followed up with a DM on October 16, 2025, asking for an update and still haven't received an answer.

Please let me know if I need to provide anything else or if you require any further action from my side.

Best regards,

Nico Just
Aditya N 3,890 Reputation points Microsoft External Staff Moderator

2025-10-29T13:59:25.2033333+00:00

Hello @Nico Just

Apologies for the inconvenience. Please be informed your query needs enabling .data protection team.
Nico Just 20 Reputation points

2025-11-28T10:59:46.9633333+00:00

Hi Aditya,

It was already mentioned in the post from Oct 6 that the data protection team is required to resolve that issue, so I'm patiently waiting. But since I've already been waiting for almost two months, and Microsoft is happily billing my account, which I cannot access anymore, may I kindly ask that the data protection team finally get in touch with me?

Best regards,

Nico Just
Nico Just 20 Reputation points

2026-01-20T21:36:02.1766667+00:00

Hi,

I am following up on my previous request as I still do not have access to my account. I have already provided all the requested information for verification.

This has now become an urgent matter: I received notice that my artifact signing identity validation expires on March 14. If this is not resolved soon, I will lose the ability to sign software, which will directly disrupt my business operations.

Could you please prioritize this ticket and restore my access as soon as possible?

Best regards,

Nico Just
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-01-21T03:09:08.9133333+00:00
Nico Just

Thank you for your reply

To proceed, we will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message only:

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Tenant Name

Country

Time Zone

Tenant id/ Domain Name

Subscription id
Nico Just 20 Reputation points

2026-02-03T20:10:04.1133333+00:00

Hi,

I sent the requested information via DM on January 21st, but haven’t received any response so far. I’d appreciate an update and am happy to provide anything further if needed.

Best regards,

Nico Just
Nico Just 20 Reputation points

2026-02-10T17:51:33.7366667+00:00

Hi,

I still do not have access to my account, despite having already provided all requested information for verification.

This matter is now time-critical. My artifact signing identity validation expires on March 14, and if this issue is not resolved before then, I will lose the ability to sign software. This would directly disrupt my business operations.

I would appreciate it if you could urgently review and prioritize this ticket and restore my access as soon as possible.

Thank you for your prompt attention to this matter.

Best regards,

Nico Just
Nico Just 20 Reputation points

2026-03-16T17:39:48.5733333+00:00

Hi,

I wanted to provide an update on this issue.

Since my last message, a support request was created regarding the tenant lockout. The case number is 2602180040002096. I received the automated confirmation email, but unfortunately I have not yet received any follow-up or contact from the assigned support engineer.

At this point I am still completely locked out of the tenant, and this issue has been ongoing for several months.

Additionally, my Artifact Signing identity validation expired on March 14, 2026, which now directly affects my ability to sign software. This has a real impact on my development and release process.

Could a moderator please help escalate this case to the Data Protection team or confirm whether the support request has been properly assigned?

If any further information is required from my side to verify ownership of the tenant, I am happy to provide it immediately via private message.

Thank you for your assistance.

Best regards,

Nico Just
Just, Nico 0 Reputation points

2026-03-26T21:43:24.86+00:00

Dear Microsoft Support Team,

I still do not have access to my account, despite having already provided all requested information for verification.

This matter is now time-critical. My artifact signing identity validation expired on March 14, and I’m not able to sign software anymore. This directly disrupt my business operations.

I would appreciate it if you could urgently review and prioritize this ticket and restore my access as soon as possible.

Thank you for your prompt attention to this matter.

Best regards,

Nico Just

Your answer

Nico Just 20 Reputation points

2025-10-02T10:13:32.8066667+00:00

Please help! I can provide my TenantID, billing information, phone numbers, email etc. to prove I am the admin of that tenant. I'm using my Azure account mainly for Azure Trusted Signing, so it's cruical for me to regain access to my account.
Anonymous

2025-10-06T11:28:08.17+00:00

Hi Nico,

Thanks for reaching out to Microsoft Q&A!

Based on your description, you’re experiencing an issue with your @live.de account, where you have MFA enabled and are unable to access the Azure portal, even though you still have access to the account itself. The error AADSTS500121 typically indicates that the MFA requirement could not be satisfied or there’s a configuration mismatch in the authentication process.

Typically, another Global Administrator can assist in re-registering MFA on a new device. However, if you're the sole Global Administrator in the tenant, this situation qualifies as a tenant lockout.

To resolve this, it's necessary to engage Microsoft’s Data Protection team by raising a support ticket. They will be able to help restore access to your account.

To move forward, I’ll need a few details from you. As the information includes Personally Identifiable Information (PII), please share the requested details securely via private message.

Thanks
Nico Just 20 Reputation points

2025-10-28T17:05:30.29+00:00

Hi,

I'm writing to follow up on this issue, as it is still not resolved.

I sent the required information via DM, but there has been no reply since October 9, 2025. I also followed up with a DM on October 16, 2025, asking for an update and still haven't received an answer.

Please let me know if I need to provide anything else or if you require any further action from my side.

Best regards,

Nico Just
Aditya N 3,890 Reputation points Microsoft External Staff Moderator

2025-10-29T13:59:25.2033333+00:00

Hello @Nico Just

Apologies for the inconvenience. Please be informed your query needs enabling .data protection team.
Nico Just 20 Reputation points

2025-11-28T10:59:46.9633333+00:00

Hi Aditya,

It was already mentioned in the post from Oct 6 that the data protection team is required to resolve that issue, so I'm patiently waiting. But since I've already been waiting for almost two months, and Microsoft is happily billing my account, which I cannot access anymore, may I kindly ask that the data protection team finally get in touch with me?

Best regards,

Nico Just
Nico Just 20 Reputation points

2026-01-20T21:36:02.1766667+00:00

Hi,

I am following up on my previous request as I still do not have access to my account. I have already provided all the requested information for verification.

This has now become an urgent matter: I received notice that my artifact signing identity validation expires on March 14. If this is not resolved soon, I will lose the ability to sign software, which will directly disrupt my business operations.

Could you please prioritize this ticket and restore my access as soon as possible?

Best regards,

Nico Just
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-01-21T03:09:08.9133333+00:00

Nico Just

Thank you for your reply

To proceed, we will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message only:

Contact phone number (add +Country code)

Contact email address

Global admin email address (affected account)

Tenant Name

Country

Time Zone

Tenant id/ Domain Name

Subscription id
Nico Just 20 Reputation points

2026-02-03T20:10:04.1133333+00:00

Hi,

I sent the requested information via DM on January 21st, but haven’t received any response so far. I’d appreciate an update and am happy to provide anything further if needed.

Best regards,

Nico Just
Nico Just 20 Reputation points

2026-02-10T17:51:33.7366667+00:00

Hi,

I still do not have access to my account, despite having already provided all requested information for verification.

This matter is now time-critical. My artifact signing identity validation expires on March 14, and if this issue is not resolved before then, I will lose the ability to sign software. This would directly disrupt my business operations.

I would appreciate it if you could urgently review and prioritize this ticket and restore my access as soon as possible.

Thank you for your prompt attention to this matter.

Best regards,

Nico Just
Nico Just 20 Reputation points

2026-03-16T17:39:48.5733333+00:00

Hi,

I wanted to provide an update on this issue.

Since my last message, a support request was created regarding the tenant lockout. The case number is 2602180040002096. I received the automated confirmation email, but unfortunately I have not yet received any follow-up or contact from the assigned support engineer.

At this point I am still completely locked out of the tenant, and this issue has been ongoing for several months.

Additionally, my Artifact Signing identity validation expired on March 14, 2026, which now directly affects my ability to sign software. This has a real impact on my development and release process.

Could a moderator please help escalate this case to the Data Protection team or confirm whether the support request has been properly assigned?

If any further information is required from my side to verify ownership of the tenant, I am happy to provide it immediately via private message.

Thank you for your assistance.

Best regards,

Nico Just
Just, Nico 0 Reputation points

2026-03-26T21:43:24.86+00:00

Dear Microsoft Support Team,

I still do not have access to my account, despite having already provided all requested information for verification.

This matter is now time-critical. My artifact signing identity validation expired on March 14, and I’m not able to sign software anymore. This directly disrupt my business operations.

I would appreciate it if you could urgently review and prioritize this ticket and restore my access as soon as possible.

Thank you for your prompt attention to this matter.

Best regards,

Nico Just