31,448 questions

Sort by: Updated
2 answers

Unable to Edit passkey profile with new entries ?

I am unable to add a new AAID from the official list of Passkey providers https://passkeydeveloper.github.io/passkey-authenticator-aaguids/explorer/ under this page: Edit passkey profile Even when using the steps described under…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-02T03:59:07.86+00:00
EnterpriseArchitect 6,416 Reputation points
edited an answer 2026-11-03T16:46:47.91+00:00
Vasileios Dionysopoulos 646 Reputation points
1 answer

Block device code flow in old Microsoft Entra tenants

I read that new Microsoft Entra tenants (created 1 July 2026 or later) no longer need Entra P1 to block device code flow. It is now part of the security defaults. Starting July 1, 2026, all new Microsoft Entra tenants block device code flow as part of…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-08-16T13:56:58.9766667+00:00
Karl Emil Nikka 5 Reputation points
commented 2026-11-03T15:46:01.74+00:00
Fabrizio Lo Conte 0 Reputation points
2 answers

Entra sign-in does not offer passkeys when the User-Agent contains "Electron/" - is this intended?

Setup An Electron 44 app (Chromium 152) on Windows 11 embeds a browser tab. WebAuthn works in that browser: PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable() returns true, and passkeys work on webauthn.io with 1Password as the passkey…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-03T08:03:52.2466667+00:00
carlintveld 31 Reputation points
answered 2026-11-03T15:07:52.8133333+00:00
Paul Thomas 80 Reputation points
1 answer

Locked out of tenant after changing sole Global Administrator from Guest to Member

I set up my test Azure lab to prepare for SC-500 using my personal account And I found out it was a guest status so I changed it to member without realizing this could lock me out. As it was a lab there was only one account. No break glass accounts set…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-05T10:31:10.4133333+00:00
Vedal neuro 0 Reputation points
edited the question 2026-11-03T14:24:43.5133333+00:00
Ana Mihaila (BLUEHAWK LLC) 0 Reputation points Microsoft External Staff Moderator
0 answers

How to Reset MFA on Personal Azure Account

I have a personal azure account that has MFA enabled. I got a new device and don't have the codes and so I am unable to sign in to the Microsoft Authenticator to get the code or acknowledge the request. How can I remove MFA and re-enroll since it's a…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-03T11:51:40.54+00:00
Brian Kushner 0 Reputation points
2 answers

Entra non-gallery SAML app (created via Microsoft Graph) sends pairwise persistent NameID instead of configured UPN on IdP-initiated sign-in

Service: Microsoft Entra ID, non-gallery enterprise application with SAML SSO. Scenario: We are a SaaS service provider. A customer creates one non-gallery SAML app per environment with the same PowerShell 7 + Microsoft.Graph script (non-gallery SAML…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-28T21:56:54.9166667+00:00
Itamar Yarden 0 Reputation points
answered 2026-11-03T07:58:42.6733333+00:00
Vasileios Dionysopoulos 646 Reputation points
1 answer One of the answers was accepted by the question author.

Personal Azure tenant sole Global Administrator lockout

I lost my phone, personal Azure tenant sole Global Administrator lockout. Not able to sign in Azure portal, I can't file a azure support ticket? who can help on this?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-31T10:01:54.53+00:00
Yun Li 20 Reputation points
commented 2026-11-03T07:13:38.6533333+00:00
JeseminQH 1,040 Reputation points Independent Advisor
1 answer

URGENT: Microsoft Entra ID Tenant Lockout – Conditional Access – Global Administrator Recovery

Tenant Information Tenant Name: cagj201 CagneyMcCauley@******@onmicrosoft.com Tenant ID: 5721c316-443e-4d36-9ca4-367d392ff173 Environment: Microsoft Azure / Microsoft Entra ID Home Lab Issue Description I am the Global Administrator of the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-02T23:30:13.43+00:00
Cagney McCauley 0 Reputation points
edited the question 2026-11-02T23:32:08.43+00:00
Cagney McCauley 0 Reputation points
2 answers

Error 399287 – Sole Global Admin locked out, SMS MFA blocked

Hello Microsoft Support Team, I am unable to access my Microsoft Entra ID tenant because SMS multi-factor authentication is blocked. Tenant: vitebsk.onmicrosoft.com Affected account: Error Code: 399287 Phone country code: +375 (Belarus) The phone number…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-27T14:34:42.8266667+00:00
Andrei Hnidzenka 0 Reputation points
commented 2026-11-02T16:25:39.6+00:00
Liora 3,200 Reputation points Independent Advisor
2 answers

Unable to access the ID Governance Lifecycle Workflows page

How can I set up the inactivity policy ? This article shows that you don't need a license to use the Agent ID default inactivity policy. https://learn.microsoft.com/en-us/entra/id-governance/agent-default-inactivity-policy However, eventhough I have…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-29T11:07:09.8566667+00:00
EnterpriseArchitect 6,416 Reputation points
commented 2026-11-02T13:39:00.77+00:00
Sreejith Reghunathan Pillai 30 Reputation points MVP
2 answers

URGENT – Sole administrator locked out of Microsoft 365 – MFA reset required

Hello Microsoft Support, I need urgent assistance recovering access to my Microsoft 365 business account. Company: Kotilove Oy Account: ******@kotilove.fi Microsoft Entra Tenant ID: af00f66f-8b91-4b43-8a3e-b9b9f66737aa Error code: AADSTS500121 I am the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-02T12:29:59.6366667+00:00
Heikki Seppänen 0 Reputation points
answered 2026-11-02T12:33:49.7066667+00:00
Sumit 44,801 Reputation points Volunteer Moderator
2 answers

Planning Entra Connect Deployment: Expected Initial Sync Time

I’m relatively new to Microsoft Entra Connect and currently planning its implementation in our environment. I’d like to understand how long the initial synchronization typically takes in a real-world environment. According to Microsoft’s official…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-02T05:26:33.58+00:00
Meganathan P 0 Reputation points
commented 2026-11-02T12:33:30.16+00:00
Paul Thomas 80 Reputation points
0 answers

Sole Global Administrator locked out of personal Azure tenant - MFA deleted - unable to create support ticket

I am the sole Global Administrator of a personal Azure / Microsoft Entra tenant. I can successfully authenticate to my personal Microsoft account, so this is not a Microsoft account/password recovery problem. I accidentally deleted the Microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-02T09:35:36.76+00:00
Liam M 0 Reputation points
1 answer

Azure portal asks for 6-digit MFA code but Authenticator only shows 8-digit (personal account) – sole admin locked out

Hi, I can't sign in to the Azure portal with my personal Microsoft account. My password works, and other Microsoft services (Outlook, account.microsoft.com) work fine. Azure then asks me to "Enter code" (6 digits), but Microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-30T13:04:18.2633333+00:00
GooBeom Jeoung 0 Reputation points
commented 2026-11-02T05:11:51.5433333+00:00
Kai-Ex 2,315 Reputation points Microsoft External Staff Moderator
1 answer

URGENT: Sole Global Administrator locked out – request for Entra tenant recovery and custom domain release

My organization has lost access to its original Microsoft Entra tenant because its only Global Administrator is stuck in an MFA registration loop. There is no secondary administrator. I created a new Entra tenant, but my custom domain, vayora.dynv6.net,…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-01T11:59:13.0233333+00:00
Vayora Corp 0 Reputation points
answered 2026-11-02T02:14:09.6133333+00:00
Kai-Ex 2,315 Reputation points Microsoft External Staff Moderator
1 answer

Microsoft 365 test tenant: AADSTS530035 blocks admin access and MFA registration

We need a supported recovery route for a separate Microsoft 365 Business Standard test tenant. The administrator password is accepted, but the admin portal returns AADSTS530035. The administrator has no enrolled MFA method, and the earlier My Sign-ins…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-01T09:06:32.1933333+00:00
Alexander Schell 0 Reputation points
edited a comment 2026-11-01T19:03:05.5933333+00:00
Jack-Bu 7,215 Reputation points Microsoft External Staff Moderator
0 answers

Can't create a new tenant directory or sign up for a new Entra license.

I am a long term azure customer who is trying to create a new azure tenant directory for a new project, but my very old account (pre Entra) seems to now be a broken state, where it keeps blocking me from every path that I take. I already created the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-10-30T03:37:09.1666667+00:00
Tony T 0 Reputation points
commented 2026-11-01T14:00:22.3366667+00:00
Nathan Roberts (SN) 14,191 Reputation points Student Ambassador Volunteer Moderator
1 answer

update mobile verification number

Hello MS team, I can not login to my account ******@seu.edu.sa due to verificaiton through old mobile number, and can't upadate my mobile number. Please help me update my phone number for this email account. My new phone number is [Mod Removed]. So, I…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-11-01T11:46:56.5933333+00:00
MOHAMMED G ALSULAMI 0 Reputation points
edited an answer 2026-11-01T12:07:33.77+00:00
Nathan Roberts (SN) 14,191 Reputation points Student Ambassador Volunteer Moderator
3 answers

SSPR with SMS/Voice retirement

Hello everyone, I've got a couple of questions related to SSPR since the retirement of the Voice/SMS for auth. Does the retirement of native SMS/Voice MFA also affect SSPR (Self-Service Password Reset) verification methods, or are these managed…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-09-08T15:57:55.95+00:00
passione 120 Reputation points
answered 2026-11-01T10:13:42.0033333+00:00
Ashish Agarwal 0 Reputation points
1 answer

Post-SMS Retirement Enforcement Scope

Post-Feb-1, for a user whose only method is SMS/voice (or who has zero methods), who signs in to a resource where no CA policy demands MFA — does the blocking passkey-registration requirement fire on that non-MFA sign-in, or only when an MFA demand is…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-08-17T19:58:27.8766667+00:00
Alena Halenwood 5 Reputation points
answered 2026-11-01T10:12:39.4833333+00:00
Ashish Agarwal 0 Reputation points