New Azure/Entra tenant is inaccessible to the sole administrator. Sign-in fails with AADSTS90123 / IdentityProviderAccessDenied, while the Microsoft account works normally elsewhere. I need Tenant Recovery assistance and can provide tenant details private

Hi,

Since you are the sole administrator and cannot access the tenant, the next step is to contact Microsoft Support for an assessment of the administrator lockout. As an Independent Advisor, I cannot access your tenant, verify ownership, or directly escalate this post.

Microsoft’s error-code reference describes AADSTS90123 / IdentityProviderAccessDenied as a refusal by the identity or claim issuance provider to issue a token. This identifies the failed operation, but does not establish the underlying cause or confirm that an MFA reset is needed.

For users who cannot sign in to the Azure portal, the Azure Support FAQ directs them to call the customer-service number for their country/region. Please use the “customer service” link under “How do I submit a support request if I can't sign in to the Azure portal?”

When contacting support, explain:

“I am the sole administrator of a new Microsoft Entra/Azure tenant. Sign-in fails with AADSTS90123 / IdentityProviderAccessDenied, so I cannot access the tenant or submit a support request through its portal. My Microsoft account works outside this tenant. I need assistance with administrator access recovery and can verify ownership. Please assess the issue and route it to the appropriate team, including Data Protection/Tenant Recovery if applicable.”

Have your tenant ID, subscription ID if applicable, full error message, correlation/request IDs, and error timestamp ready for the official support case. Share these through the private channel provided by Microsoft Support. Please mask personal information and diagnostic identifiers in any screenshots posted publicly, and provide ownership documents only through the verification process specified by Support.