Azure sign-in blocked by AADSTS53003 during MFA/security-info setup despite personal-account two-step verification being enabled

Oscar 0 Reputation points
2026-10-16T03:40:12.39+00:00

Hello,

I am unable to access my existing Azure subscription because the sign-in process gets blocked during MFA/security information setup. I previously signed in successfully using my personal Microsoft account through https://ms.portal.azure.com/.

The issue has persisted for several days, and I need help identifying the cause and finding a supported recovery path.

Steps to reproduce

  1. Open the Azure portal and sign in with my existing personal Microsoft account.
  2. A “More information required” page appears. It says that my organization needs additional security information and that I must complete multifactor authentication before changing my security information.
  3. Click “Next”.
  4. Instead of being able to complete verification or registration, I receive an access-denied page stating that my sign-in was successful but does not meet the requirements for accessing this resource.

Error details

  • Error code: AADSTS53003 / BlockedByConditionalAccess
  • Application: Microsoft App Access Panel
  • Device platform: macOS
  • Device status: Unregistered
  • Device identifier: Not available

Current configuration and troubleshooting

  • Two-step verification is already enabled for my personal Microsoft account.
  • Microsoft Authenticator is installed.
  • Azure CLI browser and device-code sign-in attempts also fail to obtain authorization for the subscription tenant, reporting AADSTS50079, which requires MFA enrollment.
  • I cannot currently access the affected tenant’s sign-in logs to identify the Conditional Access policy or authentication requirement that is failing.
  • I understand that “Unregistered” alone does not establish that device registration is the cause of this error.

The apparent problem is that I am required to complete MFA/security-info setup, but the next step in that process is itself blocked. I cannot tell whether this is related to an authentication-method requirement, Conditional Access, or another requirement in the resource tenant.

Help requested

  1. How can I identify the exact policy or requirement blocking this security-info flow?
  2. How should MFA be completed for a personal Microsoft account in this situation, given that personal-account two-step verification is already enabled?
  3. If no other administrator can sign in to the affected tenant, what is the supported tenant-access recovery process?
  4. How can I open a private Azure/Microsoft Entra support case when the support portal redirects me through the same blocked sign-in process?

I am looking for a supported way to restore access while maintaining the required security protections, rather than disabling or bypassing MFA or Conditional Access.

I have the full diagnostic timestamps, request IDs, correlation IDs, and tenant details available. I can provide them privately through an official Microsoft support channel rather than posting account-specific information publicly.

Thank you.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Hin Vo 1,535 Reputation points Independent Advisor
    2026-10-16T06:46:02.5433333+00:00

    Hi @Oscar

    Based on your description, this issue appears to be related to a tenant-level MFA registration requirement or a Conditional Access policy rather than the two-step verification already configured on your personal Microsoft account. The combination of AADSTS50079 (MFA enrollment required) and AADSTS53003 (BlockedByConditionalAccess) suggests that the tenant is requiring MFA registration, but the security information registration flow is itself being blocked by a Conditional Access policy.

    As far as I know, the exact policy responsible can be identified by reviewing the Microsoft Entra sign-in logs and the Conditional Access details associated with the failed sign-in event. The Conditional Access tab in the sign-in logs typically shows which policy was applied and which requirement was not satisfied. However, since you are currently unable to access the tenant and do not have access to the sign-in logs, this may have resulted in an administrative lockout scenario. If no other administrator can successfully sign in to the tenant, I would recommend contacting Microsoft Support and requesting assistance with a tenant access / administrator lockout situation. Microsoft Support can review the tenant-side configuration and advise on the supported recovery process. This is generally the appropriate path when Conditional Access or MFA registration requirements prevent all administrative access.

    You can find the appropriate support phone number here: Contact Microsoft customer support

    When calling the support number, you may first hear a recorded message lasting approximately 30 seconds (for example, suggesting that you visit an online support page). You can simply wait for the menu options to be presented. Typically, selecting "1" for business users and then "1" again for technical support will guide you to the appropriate support flow. 

    In some regions, the initial interaction may be handled entirely by an automated system. To help you prepare, below is an example of the questions you may receive and the recommended responses: 

    What kind of problem are you experiencing? 

    Answer: Authenticator 

    What product are you using? 

    Answer: Office 365 for business 

    Is this for an education or company account? 

    Answer: For companies 

    Are you an administrator? 

    Answer: Yes 

    Are there any other administrators in your organization? 

    Answer: No. I am the only administrator in the tenant. 

    Do you need a Service Request? 

    Answer: Yes. I need to open a support ticket. Please transfer me to the Data Protection team. 

    Please note that this team is always overwhelmed, so you might need to wait for them to call you, this should take 3-10 working days. 

    I hope this information helps you successfully escalate your request and regain access to your tenant.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.