Unable to login Azure Admin account asking MFA but we have not setup any MFA in that account.We need to disable the MFA for admin account

Ravin Kishore 0 Reputation points
2026-04-29T10:31:43.6333333+00:00

Unable to login Azure Admin account asking MFA but we have not setup any MFA in that account.We need to disable the MFA for admin account

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-04-29T10:31:55.03+00:00

    The account is being prompted for MFA because a mandatory or tenant-wide MFA requirement is enabled, even if no per-user MFA was explicitly configured for that admin.

    If the admin cannot complete MFA and there is at least one other Global Administrator in the tenant, that other Global Administrator must sign in and reset the affected admin’s MFA so it can be re-registered correctly:

    1. Another Global Administrator signs in to the Azure portal.
    2. Go to Microsoft Entra IDUsers.
    3. Select the locked-out admin account.
    4. Select Authentication methods.
    5. Select Require re-register multifactor authentication.
    6. The locked-out admin then signs in again and is prompted to set up MFA from scratch.

    This does not “disable” MFA, but it clears the existing registration so the admin can enroll a working method and regain access.

    If the locked-out admin is the only Global Administrator in the tenant (no other admin can perform the reset), the situation is treated as a tenant lockout. In that case, Microsoft’s Data Protection team must be engaged via a support ticket or phone support to verify ownership and help restore access to the tenant and adjust MFA as needed. Forum moderators or normal users cannot disable MFA or bypass it for that account.

    If users more broadly are unable to sign in after a mandatory MFA rollout, a Global Administrator can also temporarily postpone enforcement for the tenant by running the official postponement script described in the mandatory MFA documentation. This script updates the enforcement date in Microsoft Entra ID so users can sign in and fix their MFA methods before enforcement resumes.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.