Share via

Multiple users unable to login and stuck in loop.

Daniel Willard 0 Reputation points
2023-04-17T17:58:52.1066667+00:00

I have several users unable to login due to a loop after putting in their email and password. The window loops between "microsoftonline" and "windowsazure" When I checked thier login info/ history this is the message listed. Upon a failed status for the login this messages is displayed in O365 Admin Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '{identifier}'. I have one location based conditional access that neither user is breaking but also a part of. Additionally they are not listed in risky users.

Office
Office
A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.
1,479 questions
Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
6,149 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,629 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,436 Reputation points
    2023-04-18T02:15:34.8833333+00:00

    @Daniel Willard , the error Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '{identifier}' may be CA related. For more information on how to verify if that's the case take a look to What Conditional Access (CA) details can I see in the sign-in logs? and View Conditional Access policies in Azure AD sign-in logs. Optionally you may provide us with correlation id and timestamp of failed signin attempts for further debugging. Take a look to Azure AD sign-in events for how to get them.

    Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

    0 comments