Share via

AADSTS50076:

Eleanor Delaney 0 Reputation points
2025-05-22T03:57:44.8266667+00:00

{

"statusCode": 400,

"headers": {

"Cache-Control": "no-store, no-cache",

"Pragma": "no-cache",

"Strict-Transport-Security": "max-age=31536000; includeSubDomains",

"X-Content-Type-Options": "nosniff",

"P3P": "CP="DSP CUR OTPi IND OTRi ONL FIN"",

"x-ms-request-id": "06276611-9b07-4307-90a6-cb0066d80100",

"x-ms-ests-server": "2.1.20824.5 - SCUS ProdSlices",

"x-ms-srs": "1.P",

"Content-Security-Policy-Report-Only": "object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-2bYaKS5y5orjXxhJcxrUUg' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All",

"X-XSS-Protection": "0",

"Set-Cookie": "fpc=ArPrY6m8tktHowNg2X6y3qjjNfLtAQAAAKvjvt8OAAAA; expires=Thu, 19-Jun-2025 20:57:15 GMT; path=/; secure; HttpOnly; SameSite=None,x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly,stsservicecookie=estsfd; path=/; secure; samesite=none; httponly",

"Date": "Tue, 20 May 2025 20:57:15 GMT",

"Content-Type": "application/json; charset=utf-8",

"Expires": "-1",

"Content-Length": "635"

},

"body": {

"error": "invalid_grant",

"error_description": "AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'. Trace ID: 06276611-9b07-4307-90a6-cb0066d80100 Correlation ID: aaf737a1-23d2-42f7-9c03-cf1ec58dc57b Timestamp: 2025-05-20 20:57:15Z",

"error_codes": [

50076

],

"timestamp": "2025-05-20 20:57:15Z",

"trace_id": "06276611-9b07-4307-90a6-cb0066d80100",

"correlation_id": "aaf737a1-23d2-42f7-9c03-cf1ec58dc57b",

"error_uri": "https://login.microsoftonline.com/error?code=50076",

"suberror": "basic_action"

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Eric Nguyen 1,030 Reputation points
    2025-05-23T02:40:44.1133333+00:00

    Hi @Eleanor Delaney ,
    This error: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000' indicates that your tenant now requires Multi-Factor Authentication (MFA) for the access scenario in use.

    Since the resource in question ('00000003-0000-0000-c000-000000000000') is Microsoft Graph, it’s unlikely that you’re using the ROPC flow.

    Recommended Actions:

    Examine Sign-In Logs: To gain more insight into why this error is triggered, inspect the Azure AD sign-in logs. In particular, check the details associated with the correlation ID aaf737a1-23d2-42f7-9c03-cf1ec58dc57b to determine which Conditional Access policies were applied during the sign-in attempt.

    Check Tenant Security Settings: Please review any recent changes to your tenant’s security policies in the Azure portal. Verify under Azure Active Directory > Security > Conditional Access as well as under Azure Active Directory > Properties > Manage Security Defaults if there are any policies enforcing MFA based on location, risk, or other factors.

    If the above answer was helpful and resolved your query, do click "Accept Answer" and "Yes" for was this answer helpful.

    Best regards,
    Eric

    0 comments
  2. Akhilesh Vallamkonda 15,355 Reputation points Moderator
    2025-05-22T16:02:09.8033333+00:00

    Hi @Eleanor Delaney

    I understand that you are encountering the error AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'. To address this issue, if you are the admin of your tenant try any of the following solutions.

    1. Disable MFA for the affected user account.
    2. Sign in to Microsoft Entra portal using Authentication Administrator(Least Privileged role) or with Global Administrator(Highest Privileged role) in the affected user's tenant and go to Microsoft Entra ID -> Users -> Select the affected User -> Go to Authentication Methods -> Select Revoke Multi factor Authentication Sessions to revoke the user's MFA settings and check the behavior.

    Hope this helps. If you still do not see enough information to isolate the issue, please let me know in the comment section.

    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.