MFA Enabled on Azure Account and need to add domain as external domain

Question

MFA Enabled on Azure Account and need to add domain as external domain

Anthony G. McMillon 0

Tenant ID: 3f1a724c-80c0-4e4a-9f48-df421ce006c5

Domain FITI.ORG

Username: ******@fiti.org

Domain to transfer to : FITIMD.ONMICROSOFT.COM

Tenant ID: 60d67474-1bf6-4d5c-bbfd-fef4ede7a476

Username: ******@fitimd.onmicrosoft.com

Monalisha Jena 0 Reputation points Microsoft External Staff Moderator

2025-08-07T06:57:26.34+00:00

Hello Anthony G. McMillon,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Could you clarify how MFA is impacting your process?

Are you encountering issues due to MFA when trying to add the external domain?
Are you looking to Transfer ownership between tenants? Or
To Add a custom domain to a different tenant?

Any additional context or specific goals would help us guide you better.

Regards,

Monalisha.
Anthony G. McMillon 0 Reputation points

2025-08-07T13:26:28.6133333+00:00

I was initially unable to read your above comments; but, now, I can.
I mistakenly enabled MFA for the "******@fiti.org" account and am unable to login because I do not have the account added to Microsoft Authenticator on my phone. I may have removed the account on my mobile phone before disabling MFA on the account and now, I am unable to login. Please disable MFA. for the username, which is again, ******@fiti.org

This issue is preventing me from transferring the domain as an external domain to my other tenant. I need to have this tenant removed and the domain transferred.
Monalisha Jena 0 Reputation points Microsoft External Staff Moderator

2025-08-08T08:15:04.8266667+00:00

Hello Anthony G. McMillon,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Based on your description, it appears that you are unable to log into the Azure Portal due to MFA issue. As the Authenticator account is removed before MFA is disabled, you lose your only second factor, locking yourself out.

In such scenarios, do you know any another Global Administrator from the tenant they can help to re-register MFA on a new mobile device. However, if you are the only Global Administrator then this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

• Contact phone number (add +Country code)

• Contact email address

• Global admin email address tenant (affected account)

• Tenant ID or domain name (.onmicrosoft.com)

• Country

• TimeZone

Please send me the detail via private message.

We can then connect offline to discuss further and assist you in resolving this issue.

Regards,

Monalisha

1 answer

Your answer

Monalisha Jena 0 Reputation points Microsoft External Staff Moderator

2025-08-07T06:57:26.34+00:00

Hello Anthony G. McMillon,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Could you clarify how MFA is impacting your process?

Are you encountering issues due to MFA when trying to add the external domain?
Are you looking to Transfer ownership between tenants? Or
To Add a custom domain to a different tenant?

Any additional context or specific goals would help us guide you better.

Regards,

Monalisha.
Anthony G. McMillon 0 Reputation points

2025-08-07T13:26:28.6133333+00:00

I was initially unable to read your above comments; but, now, I can.
I mistakenly enabled MFA for the "******@fiti.org" account and am unable to login because I do not have the account added to Microsoft Authenticator on my phone. I may have removed the account on my mobile phone before disabling MFA on the account and now, I am unable to login. Please disable MFA. for the username, which is again, ******@fiti.org

This issue is preventing me from transferring the domain as an external domain to my other tenant. I need to have this tenant removed and the domain transferred.
Monalisha Jena 0 Reputation points Microsoft External Staff Moderator

2025-08-08T08:15:04.8266667+00:00

Hello Anthony G. McMillon,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Based on your description, it appears that you are unable to log into the Azure Portal due to MFA issue. As the Authenticator account is removed before MFA is disabled, you lose your only second factor, locking yourself out.

In such scenarios, do you know any another Global Administrator from the tenant they can help to re-register MFA on a new mobile device. However, if you are the only Global Administrator then this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

• Contact phone number (add +Country code)

• Contact email address

• Global admin email address tenant (affected account)

• Tenant ID or domain name (.onmicrosoft.com)

• Country

• TimeZone

Please send me the detail via private message.

We can then connect offline to discuss further and assist you in resolving this issue.

Regards,

Monalisha

Answer 1

Hello Anthony G. McMillon,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to re-register MFA.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Once the issue has been resolved by our support team, please feel free to revisit and kindly click "Accept Answer," as this will be helpful to other community members facing similar issues.

Regards,
Monalisha

Share via

MFA Enabled on Azure Account and need to add domain as external domain

1 answer

Your answer