Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Multifactor authentication (MFA) is enforced by the organization or by Microsoft 365 security defaults. Even if it was not manually configured, the admin account can still be required to sign in with MFA before accessing the admin portal.
Use these options, in order:
- Try the default MFA setup flow
- Go to the Microsoft 365 sign-in page and sign in with the admin username and password.
- When prompted that “You need to sign in using multifactor authentication,” select Next and follow the wizard.
- By default, it will offer the Microsoft Authenticator app. Install it on the phone and follow the prompts.
- If Authenticator is not desired, choose I want to set up a different method and configure SMS (text message) instead. Microsoft 365 will send a 6‑digit code to verify the phone.
- If sign-in is blocked after multiple attempts
- If many attempts have already been made and sign-in is now blocked, wait and try again later, or use a different MFA method if one is available.
- If there is suspicion of malicious activity, contact the organization’s IT administrator (another admin, if one exists) and have them review Microsoft Entra sign-in logs.
- If another global admin exists
- Another global admin can sign in to the Microsoft Entra admin center and reset MFA for the account by requiring re-registration of multifactor authentication, then the admin can complete MFA setup again at next sign-in.
- If this is the only admin account and MFA cannot be completed
- When there is only one admin and that admin is locked out by MFA, self-service recovery is not possible.
- In that case, contact Microsoft Support by phone using the public Customer service phone numbers page and request escalation to the Data Protection team for tenant admin recovery. Be prepared to verify identity and tenant ownership.
Once MFA is successfully configured, future admin sign-ins will use the configured method (Authenticator app or SMS) as the second factor.
References:
- Set up your Microsoft 365 sign-in for multi-factor authentication
- Common problems with two-step verification for a work or school account
- Use a screen reader to set up and troubleshoot multifactor authentication
- Secure your business
- You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Global Admin Locked out - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A