Unable to access azure personal subscription

Question

Unable to access azure personal subscription

Talon Ireland 20 Microsoft Employee

Somehow I'm unable to access my personal azure subscription default directory. Sometimes I can get into the azure account, but can't switch directories to the default without it prompting for MFA which fails to send a notification to my authenticator app, and the OTP code option is 6 digits and mine is 8. I tried removing the authenticator option and attempting to add via the third party app route (despite using authenticator) this gives me a 6 digit OTP but it doesn't take it.

As this is a personal account, I am the tenant admin so there's no one to escalate to. From these other threads it seems like this is a lockout scenario and I require resetting MFA for my account. Is there someone who can help create an appropriate ticket to escalate to the right team to unblock my access? Thank you.

https://learn.microsoft.com/en-us/answers/questions/5806365/can-someone-help-me-fix-this-kind-of-issue-microso

https://learn.microsoft.com/en-us/answers/questions/5634167/need-to-access-azure-but-authenticator-gives-8-dig

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Rukmini 30,115 Microsoft External Staff Moderator

Hello Talon Ireland

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Talon Ireland 20 Reputation points Microsoft Employee

2026-03-13T00:01:31.5333333+00:00

Thanks a ton for your help! In case anyone else ever faces a similar issue and wondering if perhaps they are the same, here's some more info about what I was facing:

My personal MSA using *@outlook.com was originally setup when 3rd party email usernames were allowed, so *@gmail.com. I signed up for azure with my MSA when my username was *@gmail.com. My azure domain for the Default Directory is Ygmail.onmicrosoft.com, and the user principal associated with it is Y_gmail.com#EXT#@Ygmail.onmicrosoft.com. I believe in the backend here there may be a single user entra account LINKED to my personal MSA. When I signed into azure with *@outlook.com, somehow I was in the global MSA tenant directory, and when I attempted to switch directories to the default directory, it prompted for MFA. Unknown to me, the MFA it was expecting was for Y_gmail.com#EXT#@Ygmail.onmicrosoft.com, the MFA for *@outlook.com is a unique entry in my Authenticator app. Providing the MFA for *@outlook.com was impossible because it didn't notify in my app, and my OTP is 8 digit for that account and it was asking for 6. I had recently switched phones, and Y_gmail.com#EXT#@Ygmail.onmicrosoft.com wasn't signed into authenticator, and attempting to signin caused an MFA loop. The MFA it was expecting was for this EXT account. Once the Data Protection team was able to verify my identify and reset the MFA for the linked EXT account, I could login to azure with the EXT account (NOT my *@outlook.com account), go through the MFA flow to set it up, then I logged back out from Azure and logged back in under *@outlook.com, and it did prompt for MFA from my EXT account which worked since I now had it setup.

I'm a little unsure of what will happen in the future if I move phones again based on how this EXT single user entra is linked to my personal MSA, since it's crazy to me that I can login with *@outlook..com but the subsequent MFA is for ANOTHER linked entra account, but I'm unblocked for now.

Share via

Unable to access azure personal subscription

0 additional answers

Your answer