Azure admin MFA Lockout

Question

Azure admin MFA Lockout

Dave Walters 35

My azure global admin account is locked out due to MFA activation required.I have tried calling support numbers from various sources but am never able to speak to anyone and end up being hung up on by your automated responses or redirected to MS support online.

I am not able to create a support ticket through another account because your automated support features never allow the ticket creation, create ticket button is either greyed out or auto-suggested support redirect to Microsoft support resource.

How do I actually get some support ? I really dont want to change credit cards and create a new subscription.

Raja Pothuraju 47,840 Reputation points Microsoft Employee Moderator

2025-02-17T16:10:31.2+00:00
Hello @Dave Walters,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it appears that you are unable to log into the Azure Portal due to an incomplete MFA process. Since the device registered for second-factor authentication are not getting any MFA prompts, you are unable to complete the authentication.

In such scenarios, another Global Administrator can help to re-register MFA on a new mobile device. However, since you mentioned that you are the only Global Admin in the tenant, this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number

Contact email address

Global admin email address (affected account)

Country

TimeZone

Please send me the detail via private message.

We can then connect offline to discuss further and assist you in resolving this issue.

Answer accepted by question author

0 additional answers

Your answer

Raja Pothuraju 47,840 Reputation points Microsoft Employee Moderator

2025-02-17T16:10:31.2+00:00

Hello @Dave Walters,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it appears that you are unable to log into the Azure Portal due to an incomplete MFA process. Since the device registered for second-factor authentication are not getting any MFA prompts, you are unable to complete the authentication.

In such scenarios, another Global Administrator can help to re-register MFA on a new mobile device. However, since you mentioned that you are the only Global Admin in the tenant, this qualifies as a tenant lockout scenario. To resolve this, we need to engage the Data Protection team via a support ticket to unblock your access.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number

Contact email address

Global admin email address (affected account)

Country

TimeZone

Please send me the detail via private message.

We can then connect offline to discuss further and assist you in resolving this issue.

Answer 1

Hello @Dave Walters,

Thank you for sharing required details via private message.

The issue relates to a tenant lockout situation where no other global admin in the tenant has the necessary admin rights to re-register MFA.

To resolve this, we engaged our Data Protection team through a support ticket. Please connect with our support team via the ticket, and they will assist you in resolving the issue.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".