Global Admin locked out by Identity Protection risky sign-in, no break-glass account, MFA re-registration loop

Dear @Marco Caimi,

Good day! Welcome to Microsoft Q&A forum!Based on your description, I understand that your only Microsoft Entra Global Administrator account has been blocked by Identity Protection due to a risky sign-in. Although password reset succeeds, the required MFA re-registration is also blocked by the same risk detection, creating a continuous access loop. Since there is no break-glass account or alternate Global Administrator available, you are seeking guidance on how to regain administrative access to the tenant.

If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts. 

Please note that I have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc. 

Therefore, if you are the only administrator in your organization, then you need to involve Microsoft Data Protection Team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Technical or Sales support phone numbers (for Work account, scroll down to find your region's number) 

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with. 

Answer: Authenticator. 

A: What products do you use? 

B: Office 365 for business. 

Verification: Education or company account? 

B: For companies 

A: Are you an administrator? 

B: Yes. 

A: Are there any other administrators in your organization? 

B: No. 

A: I need one.... Service request? 

B: Yes 

(Important Note: Sometimes, you would hear the computer-generated voice at first, please kindly wait for it to end, and if an agent is available, you would be directed to them and get your support. Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "You can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.) 

As an alternative, you can create a new tenant account and submit your request from there.    

To set up a new tenant, please follow these steps: 

• Visit Compare Office 365 Enterprise Pricing and Plans | Microsoft 365, choose any plan and click try for free to start a free trial.    
• Follow the guided setup process to create a new account for a new tenant. 

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In the ticket's description, you could refer to this message "Hello,

I am currently locked out of my Microsoft Entra tenant because my only Global Administrator account has been flagged by Identity Protection as a risky sign-in. I can successfully complete a self-service password reset; however, I am then prompted to re-register MFA, and the MFA registration process is also blocked by the same risk detection, resulting in a continuous access loop.

To resolve this, I have created a new tenant and would like to be connected with the Data Protection Team to verify my identity and assist with regaining access. I am available to provide any required documentation or verification to support the recovery process."

Ticket Support: Log in the Microsoft 365 Admin Center using the newly created trial admin account > Support > Help & Support. You can raise support ticket at: https://admin.microsoft.com/#/support/requests   

• After clicking on "Help & Support" button, you can type "I need agent support via phone or email". After that, you can click on "Contact support" 
• Choose contact method: "Phone" 
• Fill all the information in this contact support details, please describe your situation carefully so they will have enough information to help you. 
• Finally, click on "Contact me"
• After completing them, you will receive an email appointment for a meeting to review this issue professionally together. 
• For more details, you could refer to this article: Get support for Microsoft 365 for business 

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful.

I'm here and happy to help! Thank you for your kindness and patience! 

If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in [our documentation] to enable e-mail notifications if you want to receive the related email notification for this thread.