A cloud-based identity and access management service for securing user authentication and resource access
Microsoft Entra ID: Unable to access Azure for Students tenant because registered Authenticator MFA is unavailable
Hello,
I am unable to access the Microsoft Entra tenant associated with my Azure for Students subscription because the MFA registration for that tenant is no longer accessible.
Scenario
- I use a personal Microsoft account to access Azure.
- I can successfully sign in to my Microsoft account and Microsoft Learn.
- I can open Azure Portal and see the affected directory under Directories + subscriptions.
- When I select Switch to the affected directory, Microsoft Entra requires MFA.
Result
The sign-in page asks me to either:
- approve a request in Microsoft Authenticator, or
- enter a 6-digit verification code.
Push notifications do not arrive.
Microsoft Authenticator currently contains my personal Microsoft account, which displays an 8-digit code, not the 6-digit code requested by the Entra tenant.
There are no other authentication methods available under Sign in another way.
Attempting to use aka.ms/mfasetup also requires the same unavailable MFA method, so I cannot re-register Authenticator myself.
I have also received AADSTS500121 when the verification code is rejected. At one point I received AADSTS53003 after authentication.
Troubleshooting already performed
- Tried Microsoft Authenticator push approval: no notification arrives.
- Tried the verification code from my personal Authenticator account: it is not accepted and is a different 8-digit code.
- Checked Sign in another way: no SMS, phone, email, security key, or other recovery method is available.
- Tried the MFA setup page: it loops back to the existing MFA requirement.
- Confirmed that my personal Microsoft account itself works correctly.
- Confirmed that the affected Entra directory is visible from Azure Portal.
- Browser/session issues were also ruled out separately; disabling Brave Shields resolved the unrelated silent sign-in error, but switching to the affected tenant still requires the unavailable 6-digit MFA.
Steps to reproduce
- Sign in to Azure Portal with my personal Microsoft account.
- Open Directories + subscriptions.
- Select Switch on the directory associated with Azure for Students.
- Microsoft Entra redirects to MFA verification.
- The only available methods are Authenticator push or a 6-digit verification code, neither of which I can complete.
I appear to be locked out of the tenant because the existing Microsoft Authenticator registration is no longer available.
What is the supported recovery procedure for this Entra tenant lockout, and can a Microsoft moderator help route the case for an MFA reset / tenant recovery?
I can provide the tenant ID, subscription ID, affected account and ownership verification details privately if required.