Cannot sign in to Azure from my main development machine

James Hardy 0 Reputation points
2026-10-15T22:46:05.2666667+00:00

My personal Microsoft account seems to be treated as a work or school account.

I never created or joined an organization. I cannot log into https://portal.azure.com from my main machine but I am logged in from my laptop. When I try and login from my maim machine I never get a push notification on Azure to confirm login and Authenticator generates an 8 digit code for access where the Azure portal wants 6 digits.

Trying to choose another method to login only allows Authenticator options even though at accounts.microsoft.com I have SMS and email as alternate methods.

There is no organization listed at accounts.microsoft.com that I can remove myself from.

Everthing I have read points to me needing to talk to the account recovery team but I cannot find a way to reach them.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Doris V 2,025 Reputation points Microsoft External Staff Moderator
    2026-10-16T03:54:24.3366667+00:00

    Dear James Hardy,

    Based on your description, it sounds like your Microsoft account may be encountering an authentication or account-type recognition issue rather than a normal Azure subscription problem.

    A few points that may help narrow this down:

    • A personal Microsoft account (MSA) can be used to access Azure services. In some situations, the sign-in experience may display wording related to "work or school accounts," but that does not necessarily mean your account is actually associated with an organization.
    • The 8-digit number generated by Microsoft Authenticator is a one-time passcode (OTP). If the sign-in page is asking for a 6-digit code or is expecting an approval notification ("number matching" prompt), the authentication method being requested may not match the method available on your device.
    • Since you can still access the account from your laptop, please sign in there and review your security information at: https://account.microsoft.com/security Ensure that Microsoft Authenticator, SMS, and email methods are still listed and up to date.

    If the Azure sign-in process only offers Authenticator and does not allow the use of your alternate verification methods, and you are unable to update or re-register your authentication methods, this is generally not something that can be resolved through this forum, as forum users do not have access to account authentication records or identity data.

    You might need to contact Microsoft Support team via phone service number: Customer service phone numbers - Microsoft Support

    If you can't create a support ticket during the call, I recommend creating a temporary tenant account and submitting the support request from there. To create a new tenant, follow these steps:

    1. Visit Office 365 E3 - Enterprise Collaboration and Productivity | Microsoft    
    2. Select any plan and click Try for free.    
    3. Complete the setup to create a new tenant.    
    4. Ticket support: In the Microsoft 365 admin center>support>help & support. You can create a support ticket: https://admin.microsoft.com/#/support/requests     

    Important: Please remember to cancel the trial subscription once your issue is resolved to avoid any charges.

    I hope it helps, please feel free to reach out if you have any other questions.

    Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-15T22:48:00.88+00:00

    Keep the laptop’s authenticated Azure session open and use it to replace the Microsoft Entra MFA registration; the eight-digit personal-account code and the six-digit Azure prompt belong to separate authentication contexts.

    1. Try the least disruptive recovery from the laptop

    Do not sign out, clear cookies, or remove the Authenticator account yet.

    1. On the laptop, open https://aka.ms/MySecurityInfo.
    2. Confirm that the page opens in the Azure tenant context and shows Security info for the affected identity.
    3. Add a new Microsoft Authenticator method and select Work or school account in Authenticator when scanning the QR code.
    4. Complete the test notification, then make the new method the default if that option is available.
    5. Only after the new method works, remove the stale tenant-side Authenticator registration.

    Microsoft Entra maintains its own Authenticator registrations, independently of the SMS, email, and Authenticator methods at account.microsoft.com. Personal and work/school account information is not synchronized, although a personal Microsoft account can exist as a guest in an Entra directory.^1^ The Entra Security info page is the supported location for managing notification and verification-code registrations.^2^

    If this succeeds, open a private browser window on the development machine and sign in to Azure again. Complete the newly registered Entra prompt. If private browsing works, remove only the affected Microsoft sign-in site data from the normal browser profile rather than clearing all browser data.

    2. If Security info requires the unavailable MFA method

    Use another appropriately privileged administrator to force MFA re-registration. Merely having a working laptop session does not mean that session can reset its own methods, create users, or assign directory roles.

    Prefer an existing authorized administrator:

    • If the affected identity has a privileged administrator role, use another Global Administrator or Privileged Authentication Administrator.
    • An Authentication Administrator is appropriate only where its role scope permits management of the affected non-privileged user.

    From the other administrator account:

    1. Open Microsoft Entra admin center.
    2. Go to Entra ID → Users.
    3. Select the affected user or guest object.
    4. Select Authentication methods.
    5. Select Require re-register MFA, then confirm.
    6. Start a fresh Azure sign-in for the affected account and register Authenticator as a Work or school account.

    This operation removes the user’s registered phone numbers, Authenticator apps, and software OATH tokens, so those methods must be registered again.^3^ A closely matching recovery case was resolved by resetting MFA on the personal account’s guest user object in the tenant.^4^

    3. If there is no other administrator

    If the laptop session still has authority to create users and assign directory roles, a temporary recovery administrator can perform the reset. This is a last-resort, high-privilege action:

    1. Create a unique recovery user with a strong password.
    2. Assign Global Administrator only for the recovery period.
    3. Register MFA on that account immediately.
    4. Use it to require MFA re-registration for the affected identity.
    5. Review the relevant audit activity, then remove or demote and disable the recovery account as soon as access is restored.

    Do not attempt this unless authorized to administer the tenant. If the laptop session cannot create users or assign roles, proceed directly to support.

    4. Open support while the laptop session still works

    From Azure Portal on the laptop:

    1. Select ? in the global header.
    2. Describe the problem as Microsoft Entra tenant MFA lockout / Authenticator registration mismatch.
    3. Continue through the suggested solutions.
    4. Select Create a support request.

    Creating a portal request requires the appropriate subscription support-request permission; a request without a subscription for an Entra scenario requires an administrator.^5^

    If no portal session or authorized administrator can open a request, this is a tenant-lockout case. Contact Microsoft customer service by phone so tenant ownership can be verified and access to the existing tenant recovered.^6^ Do not ask for the personal Microsoft account to be deleted: the required action is recovery or reset of the tenant-side Entra MFA registration.

    References

    1. What's the difference between a Microsoft account and a work or school account? | Microsoft Support
    2. Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
    3. Manage user authentication methods for Microsoft Entra multifactor authentication
    4. Reset Personal Azure MFA - Microsoft Q&A
    5. Create an Azure support request
    6. Plan for tenant recoverability
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.