MFA & Verification Issues

Fix Microsoft Authenticator Administrator Sign-In Loop

Maira Mehtab Sep 24, 2026 869 views

Question details

The sole administrator for an organization is locked out of their work email due to an infinite loop requesting Microsoft Authenticator approval, with the app showing the account as disabled.

Product: Microsoft Authenticator
Device & OS: not provided
Scenario: Attempting to sign in to a Microsoft work email as the only global administrator for the organization.
Observed behavior: The sign-in process repeatedly requests Authenticator approval, but no prompt appears. The account shows as disabled in the app, and alternative sign-in methods just route back to the Authenticator.

Before you start

Gather your organization's subscription details, billing information, and tenant ID, as Microsoft Support will require these to verify your identity.

Solution 1Recommended

Contact Microsoft Support for Data Protection Escalation

Since you are the only administrator and are locked out, you cannot reset your own MFA. You must contact Microsoft Business Support to regain access.

When the sole global administrator is locked out of a Microsoft 365 tenant, standard password resets or automated MFA recovery options will not work. The issue must be escalated to the Microsoft Data Protection team, who have the authority to verify your identity and manually reset the multi-factor authentication requirements for your organization.

Locate the Support Number

Look up the Microsoft global customer service phone numbers online and find the specific business support number for your country or region.

Navigate the Phone Menu

Call the support number. When prompted by the automated system, select the options for a 'Business Email User' and 'Technical Support'.

Request Data Protection

Once connected to a frontline support agent, explicitly explain that you are the sole admin locked out by a sign-in loop and request an escalation to the Data Protection team.

Verify Organization Identity

Provide the agent with your subscription details, billing information, and domain name to prove ownership of the tenant so they can proceed with the MFA reset.

Wait Times: Escalations to the Data Protection team may take some time, occasionally requiring a callback. Keep your phone line available and note your support ticket number.

Free Microsoft Office alternative

Experience a Hassle-Free Alternative with WPS Office

While waiting for Microsoft support to resolve your admin access issues, you can continue your daily document work without interruption using WPS Office. It is a free, lightweight, and highly compatible alternative that lets you create, edit, and share documents offline without complex login loops.

1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
2. Install the Software: Run the installer and follow the quick on-screen instructions to set up WPS Office on your device.
3. Open and Edit Files: Launch the application to seamlessly open, edit, and save your existing Microsoft Office documents without needing cloud access.

Fully compatible with Microsoft Word, Excel, and PowerPoint formatsNo complex admin configurations or MFA loops required for basic offline useLightweight application that runs smoothly on PC, Mac, and mobile devicesFree to download and use with a highly familiar user interface

microsoft office alternative - wps office

Frequently Asked Questions

Why does Microsoft Authenticator get stuck in an approval loop?

This usually happens when the app loses its registration token, the account is disabled on the device, or the default MFA method is corrupted but still enforced by the organization's tenant policies.

Can I reset my admin MFA if I am the only administrator?

No. If you are the sole global administrator, you cannot reset it yourself. You must contact Microsoft Support's Data Protection team to prove identity and have them manually reset the MFA settings for your tenant.

What happens if I cannot find my billing information for verification?

If you cannot provide billing information, the Data Protection team may ask alternative verification questions, such as DNS TXT record verification for your domain, to prove you own the tenant.

Login & Account Issues