Locked out of Azure: AADSTS16000 Error, Tenant Issue, and Authenticator

Question

Locked out of Azure: AADSTS16000 Error, Tenant Issue, and Authenticator

Daniel Monteiro de Carvalho 0

Hello community,

I am reaching out here because I am currently unable to even open a support ticket through my Azure account due to the authentication and tenant issues described below.

First, I am experiencing an issue with my authentication to the portal. The portal repeatedly asks for an Authenticator code, but the push notification never arrives. When I select the option to enter a manually generated code, the portal asks for a 6-digit code, but the code displayed in my Authenticator app for this account has 8 digits. The problem occurs only in Azure, the authentication to other Microsoft services is working as usual.

Additionally, I am repeatedly receiving the following error in the Azure portal when trying to navigate: {

"sessionId": "<pii removed>",

"errors": [

{

  "errorMessage": "interaction_required: AADSTS16000: User account &#39;{EUII Hidden}&#39; from identity provider &#39;live.com&#39; does not exist in tenant &#39;Microsoft Services&#39; and cannot access the application &#39;e6694c91-1590-4e35-9bb7-b865c638b9c1&#39;(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: bf5df8ca-0245-42c2-8b05-691632ae4500 Correlation ID: <pii removed> Timestamp: 2026-03-22 10:27:26Z",

  "clientId": "<pii removed>",

  "scopes": [

    "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"

  ]

},

{

  "errorMessage": "interaction_required: AADSTS16000: User account &#39;{EUII Hidden}&#39; from identity provider &#39;live.com&#39; does not exist in tenant &#39;Microsoft Services&#39; and cannot access the application &#39;e6694c91-1590-4e35-9bb7-b865c638b9c1&#39;(Microsoft_Azure_SupportPortalExtension) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: bf5df8ca-0245-42c2-8b05-691632ae4500 Correlation ID: <pii removed> Timestamp: 2026-03-22 10:27:26Z",

  "clientId": "<pii removed>",

  "scopes": [

    "959678cf-d004-4c22-82a6-d2ce549a58b8/.default"

  ]

}
  ]

}  It appears that an educational organization to which my account was previously linked has disabled the associated subscription. Because my account is still trying to authenticate against that disabled tenant, I am unable to perform any actions or access the support center.

Since I am locked out of opening a standard support ticket, has anyone experienced this specific tenant lockout and Authenticator mismatch? What is the proper escalation path to get my account unlinked from this disabled organizational tenant so I can regain normal access to the platform services?

Thank you in advance for your attention and assistance.

Regards,

Daniel Carvalho

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-03-23T05:59:54.7233333+00:00
Hello Daniel Monteiro de Carvalho

Thank you for reaching out to Microsoft Q&A.

Based on your description, it appears that you are trying to login with Microsoft personal account, not an Azure work or school account. This is why you’re encountering errors when trying to access the Azure Portal.

Issue: When users try to login to Azure portal using their personal Microsoft Account (Outlook, Hotmail..) they are getting AADSTS160021 or AADSTS16000 or AADSTS50020 errors.

Reason: When signing in to the Azure portal with a personal Microsoft account, you are automatically connected to the Microsoft Services tenant (Tenant ID: f8cdef31-a31e-4b4a-93e4-5f571e91255a).

You can verify this by navigating to Microsoft Entra ID > Overview, where you’ll see this Tenant ID.

This default tenant does not have a directory associated with it, which you can confirm by going to the Settings blade. As a result, you cannot perform administrative actions such as:

Creating users or groups

Registering enterprise applications

Managing resources

In short, it’s a system tenant with restricted capabilities, and administrative access is not granted by default.

Solution: To fully utilize the Azure portal, you need to create your own tenant instead of relying on the Microsoft Services tenant.

Follow these steps:

Open an in-private/incognito browser window (to avoid automatic sign-in via SSO).

Navigate to https://azure.microsoft.com/en-us/free/ to sign up for a free Azure account.

During the setup, you’ll be prompted to create a new directory (tenant). Once completed, you will become the Global Administrator of this new tenant, giving you full access to manage Azure resources.

Let me know if you need help with the sign-up process or configuring your new tenant.

Thank you.
Daniel Monteiro de Carvalho 0 Reputation points

2026-03-23T08:34:50.1333333+00:00

Hello, Shubham,

Thank you for your reply.

I tried to create a Pay-As-You-Go subscription instead:

This takes me to the same Authenticator error I mentioned before:

Just a reminder, this Authenticator issue occurs only for Azure. For all other Microsoft services, my Authenticator is working properly.

I look forward to your response.

Regards,
Daniel Carvalho
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-03-24T10:23:47.3366667+00:00

Daniel Monteiro de Carvalho

Thank you for your reply

To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the requested details via private message only:

Please send me the detail via private message. So, we can assist you further.
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-04-16T12:52:18.16+00:00

Daniel Monteiro de Carvalho

he data protection team tried to reach you; however, they did not receive any response from your end. let us know if you need any further assistance from our end. Thank you.

Your answer

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-03-23T05:59:54.7233333+00:00

Hello Daniel Monteiro de Carvalho

Thank you for reaching out to Microsoft Q&A.

Based on your description, it appears that you are trying to login with Microsoft personal account, not an Azure work or school account. This is why you’re encountering errors when trying to access the Azure Portal.

Issue: When users try to login to Azure portal using their personal Microsoft Account (Outlook, Hotmail..) they are getting AADSTS160021 or AADSTS16000 or AADSTS50020 errors.

Reason: When signing in to the Azure portal with a personal Microsoft account, you are automatically connected to the Microsoft Services tenant (Tenant ID: f8cdef31-a31e-4b4a-93e4-5f571e91255a).

You can verify this by navigating to Microsoft Entra ID > Overview, where you’ll see this Tenant ID.

This default tenant does not have a directory associated with it, which you can confirm by going to the Settings blade. As a result, you cannot perform administrative actions such as:

Creating users or groups

Registering enterprise applications

Managing resources

In short, it’s a system tenant with restricted capabilities, and administrative access is not granted by default.

Solution: To fully utilize the Azure portal, you need to create your own tenant instead of relying on the Microsoft Services tenant.

Follow these steps:

Open an in-private/incognito browser window (to avoid automatic sign-in via SSO).

Navigate to https://azure.microsoft.com/en-us/free/ to sign up for a free Azure account.

During the setup, you’ll be prompted to create a new directory (tenant). Once completed, you will become the Global Administrator of this new tenant, giving you full access to manage Azure resources.

Let me know if you need help with the sign-up process or configuring your new tenant.

Thank you.
Daniel Monteiro de Carvalho 0 Reputation points

2026-03-23T08:34:50.1333333+00:00

Hello, Shubham,

Thank you for your reply.

I tried to create a Pay-As-You-Go subscription instead:

This takes me to the same Authenticator error I mentioned before:

Just a reminder, this Authenticator issue occurs only for Azure. For all other Microsoft services, my Authenticator is working properly.

I look forward to your response.

Regards,
Daniel Carvalho
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-03-24T10:23:47.3366667+00:00

Daniel Monteiro de Carvalho

Thank you for your reply

To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the requested details via private message only:

Please send me the detail via private message. So, we can assist you further.
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-04-16T12:52:18.16+00:00

Daniel Monteiro de Carvalho

he data protection team tried to reach you; however, they did not receive any response from your end. let us know if you need any further assistance from our end. Thank you.