unable to access the multi factor authentication.

Select Continue and register an available MFA method; disabling tenant-configured MFA does not remove Microsoft’s mandatory MFA requirement for the Microsoft 365 admin center.

Microsoft began gradually enforcing MFA for Microsoft 365 admin-center sign-ins in February 2025, and all accounts accessing that portal must complete MFA. The prompt in the screenshot is therefore expected enforcement rather than a password-reset prompt.^1^

If registration is available

1. Select Continue.
2. Follow the prompts to register Microsoft Authenticator or another method offered by your organization.
3. Complete the verification and return to the admin center.
4. Register at least one additional authentication method afterward to reduce the risk of another lockout. Microsoft recommends multiple methods per user.^2^

If Continue produces an error, loops back to the same page, or requests approval from an Authenticator registration you cannot access, use the applicable recovery path below.

If another Global Administrator can sign in

Have that administrator reset the affected account’s MFA registration:

1. Sign in to the Microsoft Entra admin center.
2. Go to Entra ID → Users.
3. Select the affected administrator.
4. Select Authentication methods.
5. Select Require re-register MFA and confirm.
6. Sign in again with the affected account and register a new method.

This removes the account’s registered phone numbers, Authenticator registrations, and software OATH tokens, and requires fresh MFA registration at the next sign-in.^3^

If no other administrator can sign in

This is a tenant administrator lockout and requires Microsoft Support to verify organizational ownership and reset the administrator’s MFA methods.

1. Open Microsoft 365’s unauthenticated support request page:
   https://admin.microsoft.com/AdminPortal/Home#/support/unauthenticated
2. Choose I can’t sign in.
3. Describe the case as:
   “Microsoft 365 tenant administrator lockout—no accessible Global Administrator; mandatory MFA registration cannot be completed.”
4. Request escalation for tenant recovery/Data Protection and an MFA-method reset.
5. Prepare the organization and subscription details requested for ownership verification, such as the tenant domain, billing or subscription information, and an alternate organizational contact. A closely matching Microsoft Q&A case confirms this route when the administrator cannot open a normal support request because MFA blocks sign-in.^4^

If that form is unavailable, contact Microsoft 365 business support by phone and request the same tenant-recovery escalation. Microsoft publishes current country/region phone options and advises administrators to have account details ready. If every subscription was purchased through a Microsoft partner, contact that partner for support instead.^5^

Do not post administrator usernames, billing details, verification records, or other ownership evidence publicly; provide them only through the private Microsoft Support case.

After access is restored

• Maintain more than one appropriately protected administrator account.
• Assign only the minimum administrative role required for routine password and user management.
• Register multiple strong authentication methods for administrator accounts.
• Review emergency-access arrangements so one unavailable device does not lock out the tenant. Microsoft recommends administrative redundancy while limiting the total number of highly privileged accounts.^6^

References

1. Mandatory multifactor authentication for Azure and admin portals
2. Recover user authentication methods using Microsoft Entra Backup and Recovery
3. Manage user authentication methods for Microsoft Entra multifactor authentication
4. Urgent Assistance Required – Unable to Access Microsoft Admin Portal Due to Lost Authenticator - Microsoft Q&A
5. Get support for Microsoft 365 for business
6. Admin account security in Microsoft 365 for business