Request for MFA Reset for Locked Global Admin on Microsoft 365 Tenant
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 46%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
JANMESH GUPTA
0
Reputation points
Hello Microsoft Community,
I’m the only Global Administrator on our Microsoft Entra External ID tenant.
I recently attempted to disable MFA from the Admin Portal after not receiving push notifications from Microsoft Authenticator. However, after making this change, I was completely locked out of my account.
I can no longer receive push notifications or verification codes on the Microsoft Authenticator app. I do not have access to any alternate MFA methods (SMS, email, or backup admin).
I have the password to the admin account, but I am in a circular loop of trying to authenticate the access. Even trying to log a ticket, I need to get into the account to do it but I can't authenticate the access.
If needed, I can provide subscription or invoice information and verify my identity in any other way necessary.
@Raja Pothuraju I have seen you help other individuals on this issue. Can you please help me connect with the Data Protection team too?
This is a critical issue as I am the only admin on the tenant, and I am now unable to manage or access our Microsoft 365 services.
Thanks,
Janmesh
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Raja Pothuraju 29,330 Reputation points Microsoft External Staff Moderator2025-08-05T00:39:21.6266667+00:00 Hello JANMESH GUPTA,
Based on your description, it appears that you are unable to log into the Azure Portal due to an incomplete MFA process. Since the device registered for second-factor authentication are not getting any MFA prompts, you are unable to complete the authentication.
In such scenarios, another Global Administrator can help to re-register MFA on a new mobile device. However, since you mentioned that you are the only Global Admin in the tenant, this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.
To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:
- Contact phone number (add +Country code)
- Contact email address
- Global admin email address (affected account)
- Country
- TimeZone
Please send me the detail via private message.
We can then connect offline to discuss further and assist you in resolving this issue.
-
Raja Pothuraju 29,330 Reputation points Microsoft External Staff Moderator
2025-08-11T18:11:54.5333333+00:00 Hello JANMESH GUPTA,
I just wanted to check if you'd be interested in taking this offline to get this resolved. Please share the necessary details in private message so I can proceed with engaging the Data Protection team.
Sign in to comment
Sign in to answer