unable to log into admin portal - authenticator app is broken

Marshall Shoemaker 0 Reputation points
2026-11-11T22:24:48.6066667+00:00

unable to log into admin portal - authenticator app is broken

Moderator's note: Moved from Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-11-11T22:25:38.4366667+00:00

    If no alternate sign-in method works, have another authorized administrator require MFA re-registration for the locked account; if this is the tenant’s only administrator, contact Microsoft business support for tenant-admin account recovery.

    1. Try an existing alternative sign-in method

    At the authentication prompt:

    1. Select Sign in another way or Other verification options.
    2. Use any previously registered method, such as SMS, voice call, security key, or another Authenticator device.
    3. After signing in, open Security info, add a working method, and remove the broken Authenticator registration.

    Microsoft recommends using a different registered method when the Authenticator device is unavailable.^1^

    2. If another administrator can sign in

    For an administrative account, use another Global Administrator or appropriately authorized Privileged Authentication Administrator. Microsoft recommends retaining at least a Privileged Authentication Administrator so a locked-out Global Administrator can be recovered.^2^

    That administrator should:

    1. Sign in to the Microsoft Entra admin center.
    2. Go to Entra ID → Users.
    3. Select the locked administrator.
    4. Open Authentication methods.
    5. Select Require re-register MFA.

    This deletes the user’s registered Authenticator apps, phone numbers, and software OATH methods. At the next sign-in, the user is prompted to register MFA again.^3^

    If available in your tenant, the administrator can instead issue a Temporary Access Pass (TAP). In Authenticator, select Add account → Work or school account → Sign in, then authenticate with the TAP to register the new app.^4^

    3. If you are the only administrator

    Actions inside Entra or Microsoft 365 cannot be used because they require an authenticated administrator. Contact Microsoft Support, enter the issue, select Get Help, and then Contact Support.[^5^](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID] "Microsoft 365 for business")

    Describe the case as:

    Sole Global Administrator locked out of the Microsoft 365/Entra tenant because the only registered MFA method, Microsoft Authenticator, is unavailable. Tenant-admin account recovery and ownership verification are required.

    Be prepared to prove tenant ownership. Support cannot simply send verification codes or change account details without the required verification.

    If Authenticator still opens but prompts are failing

    Before resetting its registration, check that the phone has network connectivity and Authenticator notifications are enabled. Update Authenticator from the device’s app store and restart the phone. If the issue persists, capture logs using Authenticator → Settings → Send Feedback.^6^

    Avoid repeated sign-in attempts; Microsoft Entra can temporarily prevent further attempts after detecting unusual or repetitive activity.^1^

    References

    1. Common problems with two-step verification for a work or school account
    2. About administrator roles in the Microsoft 365 admin center
    3. Manage user authentication methods for Microsoft Entra multifactor authentication
    4. Configure Temporary Access Pass to register passwordless authentication methods
    5. [Microsoft 365 for business](https://support.microsoft.com/accounts-billing/subscriptions/[Subscription ID])
    6. Troubleshoot problems with Microsoft Authenticator | Microsoft Support
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Alina Le 5,820 Reputation points Independent Advisor
    2026-11-11T23:21:48.5133333+00:00

    Good day Marshall Shoemaker

    First, I would like to clarify one point: this forum is intended for users to help one another. No one here, including myself, has the authority or the tools required to unlock MFA on your behalf. I can only gather information from similar cases and share it to help you move forward.

    Might I confirm whether you are the "only Global Administrator" of this tenant?

    • If not, please follow "Step 1".
    • If you are the only Global Administrator, please follow "Step 2" to contact the Data Protection Team so they can verify your information and assist you in regaining access to your account.

    1/ Reset MFA methods 

    If you still can sign in to your administrator account in your browser or your tenant has another global admin, please try to reset the MFA methods. Once reset, I recommend re-registering MFA using the Microsoft Authenticator app instead of SMS. 

    In the Entra admin center, an administrator can set user accounts to require a re-enrollment of multi-factor authentication (MFA). Ask your administrator to follow the steps shown in the following article: 

    Manage user authentication methods for Microsoft Entra multi-factor authentication 

    User's image

    2/ Contacting Microsoft Data Protection team by phone support

    In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.     

    Therefore, if you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

    If you can use English, you may prefer these numbers:

    User's image

    User's image

    (Important Note: Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

    In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.

    Answer: Authenticator.

    A: What products do you use?

    B: Office 365 for business.

    Verification: Education or company account?

    B: For companies

    A: Are you an administrator?

    B: Yes.

    A: Are there any other administrators in your organization?

    B: No.

    A: I need one.... Service request?

    B: Yes  

    If your organization's Office 365 Business subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.

    Please try "2 or 3"times until you can reach out to an agent.

    Kind regards,

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.