reset microsoft entra MFA

Hey there! It sounds like you’ve lost access to your only admin account because you can’t clear or re-register its MFA methods. To fix that, you’ll need another privileged account (Global Administrator or Authentication Administrator) to force an MFA reset on your locked-out admin. Here’s what you can try:

1. Log in with a different Global Admin or Authentication Administrator account

• If you have another built-in Global Administrator, great—use that.

• If you’ve assigned the Authentication Administrator role to someone, they can also reset MFA methods.

2. In the Entra portal, go to Microsoft Entra admin center > Entra ID > Users

• Find and select the admin user who’s locked out.

• On the left pane, click Authentication methods.

3. Force an MFA re-registration

• Select Require re-register multifactor authentication.

• This clears out all existing phone/App methods for that user.

4. Have the admin sign in again

• When they next log in with their username and password, they’ll be prompted to set up MFA from scratch.

5. (If you don’t have another admin) Use self-service password reset or account recovery

• On the sign-in page, click Can’t access your account? or Forgot my password if SSPR is enabled and you have alternate methods registered.

• Otherwise you may need to open a Support request with Microsoft or use an “emergency break-glass” Global Admin account to regain portal access.

Follow-up questions to narrow down next steps:

1. Are there any other Global Admin or Authentication Admin accounts in your tenant?
2. Is Self-Service Password Reset (SSPR) enabled, and do you have alternate verification methods (phone or email) set up?
3. Do you have a break-glass (emergency) Global Admin account that’s exempt from your Conditional Access policies?

Reference list of docs I used:

• Manage/reset MFA methods: https://learn.microsoft.com/entra/identity/authentication/howto-mfa-userdevicesettings

• Force re-register MFA: https://learn.microsoft.com/entra/identity/authentication/howto-mfa-userstates#require-user-to-register

• Self-service password reset: https://learn.microsoft.com/azure/active-directory/authentication/quickstart-sspr

• Account recovery with Temporary Access Pass: https://learn.microsoft.com/entra/identity/authentication/how-to-account-recovery-for-users

Otherwise, please check private messages!