Azure Portal / Microsoft Entra ID: Locked out of tenant after adding recovery email, receiving AADSTS16000, cannot create support request

Question

Azure Portal / Microsoft Entra ID: Locked out of tenant after adding recovery email, receiving AADSTS16000, cannot create support request

Ayesh Rehman 5

Service: Azure Portal, Microsoft Entra ID (Azure Active Directory)

Scenario: I am the owner of an Azure subscription and tenant. I originally used a personal Microsoft account (live.com / outlook.com) to create the subscription. Recently, I added a recovery email to my Microsoft account. Immediately after this change, I was completely locked out of my Azure tenant.

Result / Error: When I try to sign in to Azure Portal, I receive the following error:

AADSTS16000: User account from identity provider ‘live.com’ does not exist in tenant ‘Microsoft Services’ and cannot access the application (Azure Portal)

I cannot switch directories.

I cannot access Microsoft Entra ID.

I cannot create an Azure support request; attempting to do so redirects me back to Azure Portal.

Support pages keep redirecting me to Azure Portal, which is inaccessible.

Environment:

Azure subscription: Personal / tenant created using a personal Microsoft account (live.com / outlook.com)

Account type: Personal Microsoft account (MSA)

Browser: Tested on Chrome and Edge (latest versions)

Operating System: Windows 10 / 11

Network: Standard home / office internet connection

Troubleshooting efforts:

Signed out and back in multiple times

Cleared browser cache and cookies

Tried different browsers and devices

Attempted to create support request through portal

Followed Microsoft documentation on locked-out accounts (https://learn.microsoft.com/en-us/azure/role-based-access-control/troubleshooting)Service: Azure Portal, Microsoft Entra ID (Azure Active Directory) Scenario:
I am the owner of an Azure subscription and tenant. I originally used a personal Microsoft account (live.com / outlook.com) to create the subscription. Recently, I added a recovery email to my Microsoft account. Immediately after this change, I was completely locked out of my Azure tenant. Result / Error:
When I try to sign in to Azure Portal, I receive the following error:
```
  AADSTS16000: 
```
- I cannot switch directories.
- I cannot access Microsoft Entra ID.
- I cannot create an Azure support request; attempting to do so redirects me back to Azure Portal.
- Support pages keep redirecting me to Azure Portal, which is inaccessible.
Environment:
- Azure subscription: Personal / tenant created using a personal Microsoft account (live.com / outlook.com)
- Account type: Personal Microsoft account (MSA)
- Browser: Tested on Chrome and Edge (latest versions)
- Operating System: Windows 10 / 11
- Network: Standard home / office internet connection
Troubleshooting efforts:
- Signed out and back in multiple times
- Cleared browser cache and cookies
- Tried different browsers and devices
- Attempted to create support request through portal
- Followed Microsoft documentation on locked-out accounts (https://learn.microsoft.com/en-us/azure/role-based-access-control/troubleshooting)

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-14T13:56:47.9166667+00:00
Hello Ayesh Rehman,

Based on your description, it appears that you have created a Microsoft personal account, not an Azure work or school account. This is why you’re encountering errors when trying to access the Azure Portal.

Issue: When users try to login to Azure portal using their personal Microsoft Account (Outlook, Hotmail..) they are getting AADSTS160021 or AADSTS16000 or AADSTS50020 errors.

Reason: When signing in to the Azure portal with a personal Microsoft account, you are automatically connected to the Microsoft Services tenant (Tenant ID: f8cdef31-a31e-4b4a-93e4-5f571e91255a).

You can verify this by navigating to Microsoft Entra ID > Overview, where you’ll see this Tenant ID.

This default tenant does not have a directory associated with it, which you can confirm by going to the Settings blade. As a result, you cannot perform administrative actions such as:

Creating users or groups

Registering enterprise applications

Managing resources

In short, it’s a system tenant with restricted capabilities, and administrative access is not granted by default.

Solution: To fully utilize the Azure portal, you need to create your own tenant instead of relying on the Microsoft Services tenant.

Follow these steps:

Open an in-private/incognito browser window (to avoid automatic sign-in via SSO).

Navigate to https://azure.microsoft.com/en-us/free/ to sign up for a free Azure account.

During the setup, you’ll be prompted to create a new directory (tenant). Once completed, you will become the Global Administrator of this new tenant, giving you full access to manage Azure resources.

Let me know if you need help with the sign-up process or configuring your new tenant.

If you already have an existing tenant and still unable login, please share your email address over private message which used to login into Azure Portal.
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-15T10:42:55.39+00:00

Hello Ayesh Rehman, Please share your email address over private message which used to login into Azure Portal.

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2026-01-15T10:42:55.39+00:00

Hello Ayesh Rehman, Please share your email address over private message which used to login into Azure Portal.