Ask an administrator in your own Microsoft 365/Entra organization to open a Microsoft support request for removal of the inaccessible external-tenant guest association.
The Leave operation requires authentication against the external organization. Because that authentication cannot be completed and the external organization has no reachable administrator or privacy contact, there is no further user-side removal method documented for this situation. Microsoft documentation normally directs blocked users to that external administrator; a closely matching case identifies Microsoft Support as the remaining route when no administrator is accessible.^1^^2^
Open the support request
- Contact your own company’s Microsoft 365 help desk or Entra administrator.
- Ask them to open an identity/Microsoft Entra support request from the Microsoft Entra admin center:
- Diagnose and solve problems
- Self-Service Support
- Complete the diagnostic questions
- Select Create a support request
- Opening an Entra support request requires an appropriate role; Microsoft documents Service Support Administrator as the minimum role for the direct Entra support-request process.^3^
- Have the administrator describe the request as:
Remove an orphaned Microsoft Entra B2B guest association from an external workforce tenant. The external organization is defunct, no administrator or privacy contact is reachable, and self-service Leave cannot complete because the external tenant’s Authenticator challenge cannot be satisfied.
Include:
- Your affected sign-in address
- External organization/tenant name
- External tenant ID, if visible
- Screenshot of the organization listed in Teams or My Account → Organizations
- Screenshot and exact text of the authentication failure
- Approximate date and time of the latest attempt
- Confirmation that the external organization and its administrators are no longer available
Do not post tenant IDs, email addresses, request IDs, or correlation IDs publicly; provide them only within the private support case.
Important limitation
Authenticator registration for a guest account can ordinarily be reset only from the external tenant. No alternative method appears because only methods already registered and permitted for that tenant are offered; when no other method is listed, administrator assistance is required.^4^
Since the external administrator no longer exists, reinstalling Authenticator, repeatedly requesting codes, or changing the MFA methods in your home organization is not a reliable removal path. Your own administrator also cannot directly delete a guest object belonging to another tenant—the support request is for Microsoft to investigate the orphaned association.
After Microsoft confirms removal, allow time for propagation, then sign out of Teams and sign back in. Teams organization-list updates can take several hours.^5^
References
- Leave an organization where you have a guest account
- personal Microsoft account has been incorrectly provisioned as a Work Account - Microsoft Q&A
- Find help and get support for Microsoft Entra
- Sign in using two-step verification or security info | Microsoft Support
- Leave a work or school organization in Microsoft Teams for personal use | Microsoft Support