Terrible service by Microsoft

If no alternate sign-in method is available, another Microsoft 365 administrator must reset your MFA registration; if you are the only administrator, submit a tenant-recovery request to Microsoft’s Data Protection team from a temporary Microsoft 365 tenant.

1. Check for another sign-in method

On the verification screen, select Sign in another way or I can’t use my Microsoft Authenticator app right now. Use any previously registered SMS, phone-call, security-key, or other method.

If you regain access, open Security info, add a replacement method, and then remove the unusable Authenticator registration. If you have lost access to all registered security information, normal self-service recovery may not be available under your organization’s policy.^1^

2. If another administrator exists

Ask a Global Administrator or appropriately privileged Authentication Administrator to:

1. Sign in to the Microsoft Entra admin center.
2. Go to Entra ID → Users.
3. Select your locked account.
4. Select Authentication methods → Require re-register MFA.
5. Confirm the action.
6. Have you sign in again and register Authenticator on the current phone.

This removes the account’s existing phone numbers, Authenticator registrations, and software OATH methods, so they must be configured again.^2^

If this is an employee account rather than the tenant’s administrator account, this is the appropriate route: contact the person or company that administers the pantrix.co.za Microsoft 365 environment.

3. If you are the only Global Administrator

Since telephone support has already ended without creating a case, use a different route rather than repeating the same call:

1. Create a temporary Microsoft 365 business trial tenant using a personal account that you can access.
2. Sign in to the new tenant’s Microsoft 365 admin center.
3. Open Help & Support and create a service request.
4. Request escalation to the Data Protection team for recovery of the original tenant.
5. Include:
   • The original tenant/domain name.
   • That you are its sole Global Administrator.
   • That access was lost because no registered MFA method is usable.
   • That you need identity/tenant ownership verification and an MFA reset.
   • A working contact address, but do not post it publicly.
6. Be prepared to provide documentation proving ownership of the tenant or subscription.
7. After recovery, cancel the temporary trial to avoid charges.

This temporary-tenant escalation is the documented workaround in a closely matching sole-administrator lockout case where normal support access is unavailable.^3^ There is no supported method to bypass MFA or generate Authenticator codes when the app is no longer registered.^4^

After access is restored, register at least two independent authentication methods and maintain more than one Global Administrator account.

For privacy, remove the Gmail contact address from any public Q&A post; Microsoft account recovery cannot be performed through a public forum.

References

1. Common problems with two-step verification for a work or school account
2. Manage user authentication methods for Microsoft Entra multifactor authentication
3. Problems with Microsoft Authenticator - Microsoft Q&A
4. My authenticator app is not working on my business account - Microsoft Q&A