MFA error 500121 – locked out of existing Microsoft Entra tenant – need Tenant Recovery

hejdschdee0doubleZ 0 Reputation points
2026-09-15T14:42:52.2+00:00

I am locked out of an existing Microsoft Entra work/school account because the registered MFA methods are no longer usable.

Password reset through SSPR using the registered alternative email address was successful. The new password is accepted. Sign-in then stops at MFA.

Microsoft Authenticator verification codes are rejected with error 500121. Authenticator push notifications do not arrive, and no alternative MFA method is offered at sign-in.

I have already exhausted the normal recovery and support routes:

  • SSPR password reset completed successfully.
  • MFA re-registration cannot be reached because sign-in requires the inaccessible MFA method first.
  • Microsoft telephone support did not provide a working recovery route.
  • I created a separate Microsoft 365 Business trial tenant solely to obtain access to Microsoft Support.
  • The Microsoft 365 Admin Center in that temporary tenant does not provide a usable way to create the required support case.
  • I then accessed Azure Help + Support from the temporary tenant.
  • Azure correctly classified the problem as Microsoft Entra Sign-in and Multifactor Authentication, but the Contact Support path only offers Azure Support Plans and does not allow me to submit the recovery case.

IMPORTANT: The Microsoft 365/Azure tenant I am currently using is only a temporary support tenant. It is NOT the affected tenant.

The affected account belongs to a different, existing Microsoft Entra tenant.

I need assistance from a Microsoft moderator to get a case opened/escalated to Data Protection / Tenant Recovery so that ownership can be verified and MFA access for the affected account can be restored.

I can provide the affected account address, tenant/domain information, contact information and any required ownership verification privately to Microsoft staff. I am intentionally not posting those details publicly.

There is no other administrator available to reset the affected MFA registration.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

2 answers

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  2. Demi Nguyen 2,005 Reputation points Independent Advisor
    2026-09-15T15:10:25.31+00:00

    Please note: This is a user-to-user Community forum. No one here can access Microsoft’s backend systems, create a support ticket, or make changes to your account, tenant, or billing information. You must contact Microsoft Support directly, as only an authorized support agent can assist with these requests. 

    Hello hejdschdee0doubleZ,

    Thank you for providing the detailed information about the steps you have already taken.

    In the Microsoft 365 admin center of the trial tenant, please go to Support > Help & support and check whether you can see the "Support Assistant" toggle at the top of the Help panel.

    If the toggle is available, please make sure that Support Assistant (AI) is turned Off. Several customers have reported that the Contact Support option may not appear while Support Assistant is enabled.

    Once Support Assistant is turned off, please enter a brief description of the issue in the Help panel and select "Get Help". The Contact Support option should then appear, allowing you to submit a support request directly to Microsoft Support.

    User's image

    If you do not see the Support Assistant toggle, or if Contact Support still does not appear after turning it off, could you please provide:

    • The exact name of the trial subscription you created.
    • A full screenshot of the Help & support panel, including all available tabs and options.

    Please make sure that passwords, verification codes, and other sensitive account information are not visible in the screenshot. This information will help me better understand why the trial tenant is not providing the option to create a support request.

    Kind regards,

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.