Reset MFA so I can log in to Azure Portal

Skuli Skulason 0 Reputation points
2026-04-16T09:56:00.28+00:00

I can not get help from Microsoft resetting MFA for my log in to Azure Portal. When I try to create a support ticket I always have to log in! I can not call them I just get a dum agent not a real person. I’m being billed ever month for a service that I can not log into! Can please someone help me here on what to do?

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Newest
  1. AI answer

    2026-04-16T09:56:16.5433333+00:00

    Use depends on whether there is another Global Administrator in the tenant.

    1. If there is another Global Admin Ask that admin to reset the MFA registration so the account can be set up again:
    1. The other admin signs in to the Azure portal and opens the Microsoft Entra admin center.
    2. Go to Identity > Users > All users.
    3. Select the locked-out user account.
    4. Open Authentication methods.
    5. Select Require re-register multifactor authentication.
    6. Sign in again with the affected account and complete MFA registration on the new device.

    This is the standard way to reset MFA for a user whose phone/app is lost or broken.

    1. If there is NO other Global Admin (only admin is locked out) This is a tenant lockout scenario. In that case, only Microsoft Support (Data Protection / Tenant Recovery team) can reset MFA after verifying tenant ownership.

    Because sign-in is blocked and a support ticket in the portal cannot be created, use one of these paths from similar resolved cases:

    Option A – Call Global Customer Service (preferred)

    1. Call the regional Customer service phone numbers - Microsoft Support listed in the documentation.
    2. When the IVR/automated system asks, clearly state:
      • Issue: “Authenticator / Multi-Factor Authentication reset.”
      • Product: “Office 365 for business” or “Microsoft 365 for business” (company account).
      • Confirm: “Yes, administrator” and “No, there is no other administrator.”
      • Ask: “I need to create a ticket and be transferred to the Data Protection Team for tenant recovery and MFA reset.”
    3. Once connected to an agent, explain that:
      • The only Global Admin is locked out due to MFA.
      • The tenant is still being billed but cannot be accessed.
      • A Data Protection / Tenant Recovery case is required to reset MFA.

    Support will then validate identity/ownership (business docs, domain, billing info, etc.) and perform the MFA reset on the admin account.

    Option B – Create a temporary tenant to open a ticket (workaround)

    If it is impossible to reach a live agent via phone:

    1. Sign up for a new Microsoft 365 tenant using a trial subscription.
    2. In that new tenant, sign in to the admin center as Global Admin.
    3. From there, create a support request asking to speak with the Data Protection team on behalf of the original (locked) tenant and request an MFA reset for the only Global Admin.

    Support will then contact back and proceed with verification and recovery for the original tenant.

    These are the supported recovery paths when an admin is locked out by MFA and cannot open a ticket from the affected tenant.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.