Sole Azure/Entra administrator locked out – MFA reset / Tenant Recovery required

ZJohn 0 Reputation points
2026-09-14T21:14:04.7366667+00:00

I can successfully authenticate with my Microsoft/Hotmail username and password.

My Azure/Entra identity appears as a guest/external account in the tenant (#EXT#).

After entering my password, Microsoft requires MFA. When I select Sign in another way, the only options available are:

• Approve a request in Microsoft Authenticator • Use a verification code from Microsoft Authenticator

I never successfully configured Microsoft Authenticator for this tenant and therefore cannot approve the request or obtain a verification code.

There are no SMS, phone, email, or other authentication methods available.

I cannot access Azure Portal or the Entra Admin Center to reset the authentication method.

This tenant contains a production Azure subscription with websites and active users.

Please help escalate this to the Microsoft Data Protection / Tenant Recovery team so ownership can be verified and the MFA/authentication methods can be reset.

I can provide subscription billing records, DNS/domain ownership, payment history, tenant information, and other proof of ownership privately.

Please do not ask me to post Tenant ID, Subscription ID, payment information, or other sensitive information publicly.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.