A cloud-based identity and access management service for securing user authentication and resource access
Based on the provided information, this is a tenant lockout scenario caused by MFA on a personal Microsoft account that is (or was) a guest/admin in an Azure tenant and now cannot pass MFA to access the Azure portal or manage the subscription.
From the available context, there is no supported self-service way to both:
- reset MFA for this locked-out personal account, and
- then delete/close the Azure tenant or subscription without being able to sign in.
The only supported path shown in the context for similar situations is:
- Have a different account with Global Administrator rights in the tenant reset MFA for the locked-out account:
- Sign in to the Microsoft Entra admin center with another Global Administrator.
- Go to Identity > Users > All users.
- Select the affected user (the personal account).
- Open Authentication methods.
- Select Require re-register multifactor authentication.
- After this, the affected user can sign in again and reconfigure MFA when prompted.
- Once access is restored, the tenant owner/admin can then manage or close the Azure subscription/tenant as needed (for example, by following the standard “close account”/tenant deletion flows, which require successful sign-in and admin access).
If there is no other Global Administrator account available in the tenant, the context does not provide a complete, documented procedure to:
- bypass MFA for a personal account, or
- directly cancel billing / delete the Azure account from outside the signed-in experience.
Because of that, the only fully documented remediation in the context is to introduce or use another Global Administrator account in the tenant, use it to reset MFA for the locked-out personal account as above, then sign in with the personal account and proceed with subscription/tenant closure.
References: