Hi @Yassir Said Ali,
Thank you for reaching out and for providing detailed information about the sign-in issue you are experiencing.
The error code 399287 most commonly occurs during the “Verify your identity” step, particularly when SMS or phone-based multi-factor authentication (MFA) is used. This error usually indicates that the phone number is currently blocked by Microsoft Entra ID phone reputation or risk controls, often due to the number being flagged with a restricted or unsupported reputation status.
1/ Contact other IT admins
Please check to see if there are other IT admins in your company who can help you with the reset MFA for your account and share with them the steps outlined in the article Manage user authentication methods for Microsoft Entra multifactor authentication. This will help them assist you in resetting your MFA settings and restoring access to your account.
Once your IT admin has reset your MFA, the next time you log in to your account, you will be guided through the process of setting up the Microsoft Authenticator app again from the beginning by scanning a QR code.
2/ Contact Microsoft Data Protection Support by phone
If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts. You can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support.
Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues but we’ll continue doing our best to support you within the scope of our responsibilities.
Here are some tips and an example of a prompt to help you navigate the IVR more effectively:
(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)
IVR: What kind of problem are you concerned about?
You: Authenticator.
A: What products do you use?
You: Office 365 for business.
Verification: Education or company account?
You: For companies
IVR: Are you an administrator?
You: Yes.
IVR: Are there any other administrators in your organization?
You: No.
IVR: Do you need a... Service request?
You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.
I truly hope this helps you regain access to your account quickly. Even though I can't directly intervene, directing you to the correct and specialized support is the most effective help I can provide from my position.
As other users may also search for information in this community, your vote can greatly help those with similar questions quickly find the most relevant resources.
Thank you for your kindness and I wish you a wonderful day ahead.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.