I have 2 user that can not login to Azure Dev Ops, they get the error 500121 when entering MFA

Question

I have 2 user that can not login to Azure Dev Ops, they get the error 500121 when entering MFA

Mark Dagley 1

Hi

I have 2 users that have encountered the following error when singing into DevOps

User's image

I have tried resetting MFA, revoking sessions, reinstalling the Authenticator app on their phones, clearing Browser cache, and turning off MFA in their AD profile but nothing seems to work.

One has just got a new phone not sure if that is the root cause.

Office and logging into the Azure portal works fine so it just seems to be Dev Ops

can anyone help?

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,536 Reputation points Moderator

2023-08-15T05:58:36.0233333+00:00

Hello @Mark Dagley , what verification methods are configured or being used by both users? Does turning off the MFA settings disables any MFA prompt?
Mark Dagley 1 Reputation point

2023-08-15T09:56:32.33+00:00

Hi, turning off MFA did make any difference, they have the MS Authenticator app on Android phones and a backup email configured. but it only ever tries to use the MS Auth app.

they are prompted on their phone to enter the code on screen but then it fails to authenticate.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,536 Reputation points Moderator

2023-08-16T05:43:52.7833333+00:00

So they enter the code, get confirmation from authenticator and on redirect, the login flow fails right?
Mark Dagley 1 Reputation point

2023-08-16T08:08:04.49+00:00

They are not getting the option of other authentication methods even though they are set up, we also tried changing the default from the app to text message and it did not have any effect.

it asks for the code from the app when that is typed in it just fails at that point.

2 answers

Your answer

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,536 Reputation points Moderator

2023-08-15T05:58:36.0233333+00:00

Hello @Mark Dagley , what verification methods are configured or being used by both users? Does turning off the MFA settings disables any MFA prompt?
Mark Dagley 1 Reputation point

2023-08-15T09:56:32.33+00:00

Hi, turning off MFA did make any difference, they have the MS Authenticator app on Android phones and a backup email configured. but it only ever tries to use the MS Auth app.

they are prompted on their phone to enter the code on screen but then it fails to authenticate.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,536 Reputation points Moderator

2023-08-16T05:43:52.7833333+00:00

So they enter the code, get confirmation from authenticator and on redirect, the login flow fails right?
Mark Dagley 1 Reputation point

2023-08-16T08:08:04.49+00:00

They are not getting the option of other authentication methods even though they are set up, we also tried changing the default from the app to text message and it did not have any effect.

it asks for the code from the app when that is typed in it just fails at that point.

Answer 1

Mark Dagley 1

ok managed to get to the bottom of this, our Office 365 provider created a second Azure directory for our company and dev ops is linked to both however the MFA settings seem to be linked to the original directory not the one linked to the Office 365 which is where i was resetting the MFA.

resetting the MFA in the other directory resolved the issues.

Dillon Silzer 60,726 Reputation points Volunteer Moderator

2023-08-16T16:10:46.77+00:00

I have converted this to an answer.

Answer 2

Hello @Mark Dagley , thanks for sharing your findings and solution. I'm reposting your answer here so that you can accept it and rate it so that others facing a similar issue can easily find a solution.

ok managed to get to the bottom of this, our Office 365 provider created a second Azure directory for our company and dev ops is linked to both however the MFA settings seem to be linked to the original directory not the one linked to the Office 365 which is where i was resetting the MFA. resetting the MFA in the other directory resolved the issues.

Share via

I have 2 user that can not login to Azure Dev Ops, they get the error 500121 when entering MFA

2 answers

Your answer