Azure Portal forces 6‑digit MFA and I cannot access my subscription (personal account treated as work account)

Question

Azure Portal forces 6‑digit MFA and I cannot access my subscription (personal account treated as work account)

Michael Ma 30

I’m unable to sign in to the Azure Portal using my personal Microsoft account. Azure keeps forcing a work/school sign‑in and asks for a 6‑digit Authenticator code, but my personal account only uses the 8‑digit code. This creates an endless MFA loop where I can’t log in, can’t switch directories, and can’t open a support ticket from the portal.

I can sign in to all other Microsoft services normally. Only Azure routes my personal account into the wrong authentication flow, possibly because it was accidentally associated with an Azure AD tenant.

Request: How can I get my personal Microsoft account detached from any Azure AD directories so Azure stops treating it like a work account? I just want to restore normal consumer‑account login and access my Azure subscription.

Thanks! @Anonymous

0 comments

Answer accepted by question author

Raja Pothuraju 47,825 Microsoft Employee Moderator

Hello Michael Ma,

As discussed over chat, you were able to log in to your Azure tenant at admin.cloud.microsoft.com. To reset your MFA, we created a new user with Global Administrator rights. Using this new account to log in to the Azure Portal, we successfully reset the MFA for your personal account, which had been added as a guest account in the tenant.

Below are the steps we followed to reset the MFA:

Sign in to the Microsoft Entra admin center.
Navigate to Identity > Users > All users.
Select the affected user, then choose Authentication methods.
At the top of the window, click on "Require re-register MFA".

Screenshot of manage authentication methods from the Microsoft Entra admin center.

After this is done, you should be able to sign in again and register a new MFA authentication method when prompted.

0 comments

2 additional answers

Your answer

Answer 1

The personal Microsoft account is almost certainly a guest or member in an Azure AD (Microsoft Entra ID) tenant and has an Azure MFA profile there that is misconfigured (tenant expects 6‑digit codes, Authenticator is issuing 8‑digit codes). This causes the wrong MFA flow and blocks access.

From the available information, the working pattern to fix this is:

Sign in to the affected tenant with another account that has Global Administrator rights.
Use that admin account to reset MFA for the personal account in the tenant.
After MFA is reset, sign in again with the personal account and complete a fresh MFA registration so the correct method is used.

Concretely, the admin in that tenant must:

Go to the Microsoft Entra admin center.
Navigate to Identity → Users → All users.
Select the affected personal account (which appears as a guest or member user).
Open Authentication methods for that user.
Select Require re‑register MFA.

After this, the next sign‑in of the personal account to Azure will prompt for MFA registration again, allowing configuration of a compatible method and breaking the loop.

If there is no other Global Administrator in the tenant (or the only admin is locked out), this becomes a tenant lockout scenario. In that case, a support ticket with Microsoft is required so the Data Protection team can reset MFA or restore access, as described for similar lockout cases in the context.

If the tenant itself is blocked or inaccessible (for example, due to inactivity), the tenant administrator must contact Microsoft using the global support phone numbers to request reactivation before MFA or directory membership can be corrected.

Once MFA is reset and access is restored, the personal account can either:

Remain as a guest in the tenant with a working MFA configuration, or
Be removed from that tenant by an admin if it is no longer needed, so Azure no longer routes sign‑in through that directory.

References:

Answer 2

Kenny Yang 0

I have the same issue. Where can I find support to reset the Azure MFA?

0 comments