A cloud-based identity and access management service for securing user authentication and resource access
Locked out of Azure tenant after adding recovery email to Microsoft account (AADSTS16000, cannot create support request)
I am completely locked out of an Azure tenant that I own, and I am stuck in a support deadlock.
What happened
- I am the subscription owner
I originally used a personal Microsoft account (live.com / outlook.com) for Azure
After adding a recovery email to my Microsoft account, I was immediately locked out
Current error When accessing Azure Portal, I get:
AADSTS16000: User account from identity provider ‘live.com’ does not exist in tenant ‘Microsoft Services’ and cannot access the application (Azure Portal)
Impact
I cannot access Azure Portal
I cannot switch directories
I cannot access Microsoft Entra ID
I cannot create an Azure support request (support requires Azure authentication)
Support pages keep redirecting me back to Azure Portal, which I cannot access
This appears to be an identity rebind / tenant admin lockout where:
The Azure tenant and subscription still exist
Billing is still active
But my Microsoft account identity is no longer recognized by the tenant after the recovery email change
Key problem I am being redirected endlessly because:
Azure support requires Azure login
Azure login is impossible due to AADSTS16000
There is no visible self-service recovery path
What I need
Tenant admin / subscription ownership recovery
Identity rebind so my account is recognized again
Or injection of a new Global Admin so access can be restored
If anyone from Microsoft or the Azure Identity team is monitoring this forum:
How can an owner recover access when Azure Portal and support creation are both inaccessible?
What is the correct escalation path for this specific lockout scenario?
Any guidance from Microsoft engineers or moderators would be appreI am completely locked out of an Azure tenant that I own, and I am stuck in a support deadlock.
What happened
I am the subscription owner
I originally used a personal Microsoft account (live.com / outlook.com) for Azure
After adding a recovery email to my Microsoft account, I was immediately locked out
Current error
When accessing Azure Portal, I get:
AADSTS16000: User account from identity provider ‘live.com’ does not exist in tenant ‘Microsoft Services’ and cannot access the application (Azure Portal)
Impact
- I cannot access the Azure Portal
I cannot switch directories
I cannot access Microsoft Entra ID
I cannot create an Azure support request (support requires Azure authentication)
- Support pages keep redirecting me back to the Azure Portal, which I cannot access
This appears to be an identity rebind / tenant admin lockout where:
The Azure tenant and subscription still exist
Billing is still active
But my Microsoft account identity is no longer recognized by the tenant after the recovery email change
Key problem
I am being redirected endlessly because:
- Azure support requires an Azure login
Azure login is impossible due to AADSTS16000
There is no visible self-service recovery path
What I need
- Tenant admin/subscription ownership recovery
- Identity rebind, so my account is recognized again
- Or the injection of a new Global Admin, so access can be restored
If anyone from Microsoft or the Azure Identity team is monitoring this forum:
How can an owner recover access when Azure Portal and support creation are both inaccessible?
What is the correct escalation path for this specific lockout scenario?
Any guidance from Microsoft engineers or moderators would be appreciated