Unable to sign in to Azure Portal due to MFA mismatch and unable to update payment information

Azure portal sign-in and MFA behavior are controlled by the Microsoft Entra (Azure AD) tenant, not by the personal security settings alone. When MFA is enforced at the tenant level, it can still require Microsoft Authenticator even if two-step verification and passwordless sign-in were turned off in the personal account settings.

Given the symptoms (MFA loop, code mismatch, and inability to reach billing), the issue must be resolved by a tenant administrator or Microsoft support; it cannot be bypassed from the user side.

Use the following steps, depending on the situation.

1. Contact a Global Admin to reset MFA and re-register methods

If there is at least one other Global Administrator in the tenant:

1. Ask the Global Admin to require re-registration of MFA for the affected user. This forces a fresh MFA setup and clears out stale or mismatched methods.
2. The admin can follow the documented steps in Microsoft Entra to manage user authentication options and require re-register MFA. See: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userdevicesettings#manage-user-authentication-options
3. After re-registration is enforced, sign in again to the Azure portal and configure Microsoft Authenticator and/or another MFA method correctly.
4. Once access is restored, go to Cost Management + Billing → Payment methods in the Azure portal and update the credit card.

This pattern is confirmed in similar cases where users reset phones or lost access to Microsoft Authenticator and needed MFA methods reset by a Global Admin.

2. If there is only one Global Admin and that admin is locked out

If the only Global Admin account is locked out by MFA and no other admin can reset MFA:

1. This is treated as a tenant lockout scenario.
2. A support ticket with Microsoft must be opened so the Data Protection or support team can help restore access and reset MFA on the tenant.
3. Once support restores access, sign in, reconfigure MFA, and then update billing information in the Azure portal.

This approach is used when a business is effectively down because the sole global admin cannot pass MFA.

3. If payment/billing is impacted and portal access is blocked

If the subscription or billing is at risk (card expired, services about to be suspended) and portal access is blocked due to sign-in/MFA issues:

1. Use the Azure Billing support path to create a support request for payment issues. If sign-in is blocked, use the “can’t sign in” support path to reach billing support.
2. For Azure payment issues, Microsoft provides a dedicated support request flow: https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/newsupportrequest
3. If the portal still cannot be accessed, follow the documented guidance to create a support request for billing or subscription issues from the public support entry points.
4. Billing support can assist with payment method problems and subscription status while sign-in issues are being resolved.
5. If automatically signed in as a different user or stuck in a sign-in loop

If the browser is automatically signing in as a different account or caching old MFA state:

1. Clear browser cache and cookies:
   • In Edge: Settings → Privacy and Services → Clear browsing data → select Browsing history, Download history, Cookies, Cached images and files → Delete.
   • In Chrome: Settings → Privacy and Security → Clear browsing data.
2. Try a private browsing session:
   • Edge: New InPrivate window.
   • Chrome: Incognito mode.
3. Sign in explicitly with the correct account and retry the Azure portal.
4. If repeated MFA attempts are blocking sign-in

If multiple failed MFA attempts have occurred, Microsoft Entra MFA may temporarily block further attempts:

1. Wait before trying again or use a different MFA method if one is available.
2. If malicious activity is suspected or logs need review, ask an IT administrator to check Microsoft Entra sign-in logs.
3. Updating payment information once access is restored

After MFA and sign-in issues are resolved and access to the Azure portal is restored:

1. Go to Cost Management + Billing in the Azure portal.
2. Select the appropriate billing account or billing profile.
3. Open Payment methods and update or replace the expired credit card.
4. Ensure the new card is associated with the correct billing profile and subscriptions.

If the Billing section or Payment methods is greyed out, it typically indicates insufficient billing permissions or that billing is managed in a different portal (for example, EA or CSP). In that case, the billing owner, enrollment administrator, or partner must update the payment method.

References:

• Troubleshoot Azure subscription sign-in issues
• Troubleshoot Azure payment issues
• Use a screen reader to set up and troubleshoot multifactor authentication
• Common problems with two-step verification for a work or school account
• I can't sign in to the My Apps portal
• I can't sign in to my Microsoft account
• I need to reset my mfa methods - Microsoft Q&A
• Azure has blocked myphone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• billing updates - Microsoft Q&A
• “My Azure subAzure Subscription shows invoice paid but remains disabled; portal not allowing reactivation or ticket generation.” - Microsoft Q&A