Global Admin Account Locked in MFA Registration Loop

This scenario matches a tenant lockout where the only Global Administrator is unable to complete MFA and there are no alternative methods available. Forum moderators and general support channels cannot directly modify or bypass account security; only the Microsoft Data Protection team can assist in recovering access after verifying identity and tenant ownership.

To move forward, use one of the following supported paths:

1. Contact Microsoft by phone and request Data Protection / Tenant Recovery
   • Call the regional support number listed under Customer service phone numbers - Microsoft Support or Support for Business Products.
   • When the automated system asks about the issue, clearly state keywords such as:
     • “Authenticator” or “Multi-factor authentication”
     • Product: “Office 365 for business” or “Microsoft 365 for business”
     • Account type: “Company account”
     • Role: “Global administrator”
     • When asked if there is another admin: “No”
   • Indicate that this is a tenant lockout and request to be transferred to the Microsoft 365 Data Protection team (also referred to as Data Protection / Tenant Recovery) to restore access and reset MFA registration.
   • Be prepared to provide tenant and company details and any documentation requested to prove ownership.
2. If phone IVR continues to fail, open a support request from a temporary trial tenant
   • Create a new, separate Microsoft 365 trial tenant (as described in the context):
     • Go to the Microsoft 365 Enterprise plans page and start a free trial.
     • Complete setup for a new tenant and sign in to the Microsoft 365 Admin Center for that new tenant.
   • In the new tenant’s admin center:
     • Go to Support → Help & support.
     • Open a new service request.
     • Clearly state that the issue is with a different existing tenant where the only Global Admin is locked out due to MFA.
     • Provide:
       • The locked tenant’s domain name.
       • The Global Admin UPN (admin account) for the locked tenant.
       • Error messages such as “We couldn't sign you in. Please try again.” and the MFA registration loop behavior.
       • Confirmation that this is a tenant lockout and that there are no other Global Admins.
   • Ask that the case be routed to the Microsoft 365 Data Protection team to verify identity and reset MFA for the locked tenant.
   • After resolution, cancel the trial subscription for the temporary tenant to avoid charges.
3. If there is any chance another Global Admin exists
   • If any other account in the tenant has Global Admin rights, that admin can:
     • Sign in to the Microsoft Entra Admin Center (https://entra.microsoft.com).
     • Go to Users → All users → [your admin account] → Authentication methods.
     • Select Require re-register multifactor authentication.
   • After this, sign-in will prompt for fresh MFA registration and break the loop.

Because this is a locked Global Admin scenario with no working MFA methods, escalation to the Microsoft Data Protection team via phone support or a support ticket from another tenant is required; community forums or tools cannot directly unlock or modify the account.

References:

• Troubleshoot sign-in issues and account access problems
• Use a screen reader to set up and troubleshoot multifactor authentication
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Common problems with two-step verification for a work or school account