Locked out of Azure AD tenant as sole Global Admin after iPhone restore wiped Authenticator registration

Martyn Lawson 0 Reputation points
2026-09-16T08:53:44.4666667+00:00

I am unable to access my Azure AD / Microsoft Entra tenant because MFA cannot be completed. The situation:

  • I restored my iPhone which wiped the Microsoft Authenticator app registration for this account
  • I am the sole Global Administrator on the tenant
  • The login prompt asks me to approve a notification or enter a code in the Authenticator app, but the app no longer has a valid registration for this account
  • I have tried "Sign in another way" but no alternative methods (SMS, email) appear to be configured
  • I cannot reset my own MFA registration as I cannot get past the login screen
  • Online support forms all require authentication to submit, creating a catch-22

I need guidance on how to verify my identity and regain access to the tenant without being able to complete MFA. I have access to billing and subscription information that could be used to verify ownership.

Tenant domain: civicaworkforcedev.onmicrosoft.com

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. JeseminQH 600 Reputation points Independent Advisor
    2026-09-16T09:35:52.71+00:00

    Hi @Martyn Lawson

    If you are the only Global Administrator and cannot access your tenant because the Microsoft Authenticator registration was removed when your iPhone was restored, please contact the Microsoft Data Protection team by phone as soon as possible as they have the necessary tools and processes to verify your identity and assist with restoring access to the administrator account.

    You can find the appropriate customer service phone numbers at this link: Customer service phone numbers. 

    (Choose Work account scroll down to Technical support phone numbers and find the Phone number of your country) 

    Please remember to provide them with your account details and explain the situation. Be ready to provide:      

    • The company name used during subscription     
    • Billing email address (even if it’s a personal Microsoft account)     
    • Payment method details (last 4 digits of the card, billing address)     
    • Any subscription ID or invoice numbers from billing email     

    When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help. 

    To make the process smoother, here’s an example of how to respond when speaking to the automated system (IVR):      

    IVR: What kind of problem are you concerned about?      

    You:  Authenticator.     

    IVR: What kind of product do you use?      

    You: Office 365 for business.      

    IVR: education or company account?      

    You: For companies      

    IVR: Are you an administrator?      

    You: Yes.      

    IVR: Do you have the other administrator in your organization?      

    You: No.      

    IVR: Do you need a... Service request?      

    You: Yes      

    These prompts help direct your call to the right support team more quickly, especially when dealing with account lockouts and authentication issues. 

    If you are still unable to reach a Microsoft support agent, you may consider the following workaround: create a new Microsoft 365 tenant by signing up for a trial subscription through Compare All Microsoft 365 Plans. Follow the guided setup to create a new Microsoft account and tenant.

    Please note that this new tenant is only a temporary trial environment. It will not be connected to your original tenant and will not give you access to its users, data, subscriptions, or settings. You will only use the trial tenant to contact Microsoft Support and submit a ticket on behalf of the tenant you cannot access.

    After setting up the new tenant, sign in to the Microsoft 365 Admin Center. Follow the instructions in Get support in the Microsoft 365 Admin Center to submit a support request. 

    In your request, ask to speak with the Data Protection team regarding your previous tenant and provide the following information: 

    • The administrator email address associated with the locked tenant 
    • The domain name of the locked tenant 
    • Any error messages you are receiving 
    • A description of the authentication or sign-in issue 
    • Confirmation that you are an administrator of the locked tenant 

    Before submitting the request, make sure Support Assistant is turned off. Some customers have reported that the Contact Support option may not appear while Support Assistant is enabled. 

    As shown in the screenshot, switch Support Assistant to Off, and then enter a description of the issue. The Contact Support button should then appear, allowing you to submit the request. 

    User's image

    Important information 

    • The new trial tenant will not provide access to any data, users, settings, or services from the original locked tenant. It is intended only as a temporary way to contact Microsoft Support. 
    • Once access to the original tenant has been restored, remember to cancel the trial subscription to avoid unintended charges. In the Microsoft 365 Admin Center, go to Billing > Your products, select the trial subscription, and follow the available cancellation instructions. Cancel your subscription in the Microsoft 365 admin center

    I hope this information is helpful. Please understand that fellow forum users can provide only general guidance and troubleshooting suggestions. I do not have access to Microsoft’s internal systems, account recovery tools, or identity-verification processes, nor do I have the authority to reset authentication methods or restore administrator access. Any further assistance with account recovery must come directly from the appropriate Microsoft Support team.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.