A cloud-based identity and access management service for securing user authentication and resource access
For a personal Azure subscription where sign-in is blocked by an Azure MFA profile in a tenant (for example, a past work/school tenant), the MFA configuration must be reset from within that tenant by an account with sufficient admin rights.
From the provided scenario, the effective pattern to resolve this is:
- Sign in to the Azure/Entra tenant where the personal account is present as a user (often as a guest) using another account that can be made a Global Administrator.
- In the Microsoft Entra admin center, go to:
- Identity → Users → All users
- Locate and select the affected personal account (for example, the Outlook.com account).
- Open Authentication methods for that user.
- At the top of the Authentication methods pane, select Require re-register MFA.
- After this is applied, sign in again with the personal account. The old MFA profile is cleared, and the account is prompted to register MFA again with a fresh method (for example, a new Microsoft Authenticator registration that matches the 6‑digit code format Azure expects).
This process removes the stuck/non-working MFA configuration in the tenant and lets the personal account complete sign-in and reconfigure MFA.
If the tenant or an admin account is no longer accessible, tenant-level support from the organization or Microsoft Support is required, as the reset must be done from within the tenant where the MFA policy is enforced.
References: