Global Admin locked out on single tenant account -- stuck in MFA loop

Tyler Jensen 0 Reputation points
2026-01-29T04:11:38.03+00:00

Hi,

I require assistance escalated to "the Data Protection team".

I am the sole global administrator for my Azure tenant. Authenticator device has been lost, and I am now locked out of the tenant, stuck in MFA loop.

I still have access to the domain and emails, and the mobile listed for my user is still actual, but MFA does not give these options. Any attempt to change MFA settings in Entra does not seem to be working (add MFA, re-register MFA, revoke MFA, changes to MFA policies, etc). I am locked out of changing these settings, some of which redirect to an MFA gate, and I suspect this soft-lockout will soon propagate to a hard lockout throughout.

Please assist

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.