Sole administrator locked out of Microsoft Entra ID due to Authenticator MFA – Tenant Recovery assistance needed

MOMO Admin 0 Reputation points
2026-09-10T04:23:33.2166667+00:00

Hello,

I am the administrator of a Microsoft Entra ID tenant for a small company in Japan.

I know the administrator username and password and can successfully pass the password authentication. However, after replacing my smartphone, I can no longer complete MFA using Microsoft Authenticator.

The current Authenticator app does not receive approval notifications and does not display a usable verification code for this work account.

I am not aware of any other available administrator account that can reset or re-register the MFA authentication methods.

I have already confirmed that Self-Service Password Reset (SSPR) works using the registered recovery email address, but resetting the password does not resolve the MFA problem.

I have also contacted Microsoft telephone support. The automated system directed me to aka.ms/ProSupport, but that page requires Microsoft account sign-in, which leads back to the same MFA problem.

Therefore, I am unable to access the Microsoft Entra admin center to reset or re-register Microsoft Authenticator.

Could a Microsoft moderator please advise whether this case can be escalated to the Data Protection / Tenant Recovery team for administrator account recovery and MFA re-registration?

I can provide the tenant information, administrator account information, company information, proof of domain ownership/DNS control, and any other required verification privately.

For security reasons, I have not included tenant or account-identifying information in this public post.

Thank you.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Helen Luu 2,785 Reputation points Independent Advisor
    2026-09-10T05:42:53.7266667+00:00

    Hello MOMO Admin,

    Your description indicates that the remaining blocker is MFA, rather than the password. Resetting the password through your recovery email does not re-register Microsoft Authenticator on your replacement phone.

    As an independent contributor, I cannot access your tenant, reset your authentication methods, or directly escalate this post to Microsoft’s Data Protection / Tenant Recovery team. Microsoft Support needs to assess the recovery request and determine the required ownership verification.

    Since you are the only administrator in your organization, you will need to contact the Microsoft Data Protection team for further assistance. Please locate the appropriate support phone number for your country or region and contact Microsoft Support so the frontline team can raise a service request on your behalf: Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support   

    User's image

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:   

    (When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)        

    In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:   

    • What kind of problem are you experiencing?           
    • Answer: Authenticator           
    • What products do you use?           
    • Answer: Office 365 for business           
    • Is this for an education or company account?           
    • Answer: For companies           
    • Are you an administrator?           
    • Answer: Yes           
    • Are there any other administrators in your organization?           
    • Answer: No. I am the only admin in my tenant            
    • Do you need a... Service request?            
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.        

    During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details.

    If you are unable to reach support via the phone numbers, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365    

    User's imageUser's image

    Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.    

    Important notes:     

    • This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.    
    • The resolution time might be longer as you are contacting support from a different tenant.    
    • Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.  

    I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.