While connecting to Linked service, I'm getting below mentioned error message

Ajay Sharma 40 Reputation points
2023-10-11T07:26:19.1+00:00

Failed to connect to Dynamics: Unable to Login to Dynamics CRM: ERROR REQUESTING Token FROM THE Authentication context - USER intervention required but not permitted by prompt behavior

AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000007-0000-0000-c000-000000000000'.

Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
11,646 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

Accepted answer
  1. Michael Smith 2,931 Reputation points Microsoft Employee
    2023-10-11T13:30:38.6+00:00

    Hi Ajay,

    Thank you for posting your query on Microsoft Q&A.

    The error message you posted means application you are trying to access requires MFA authentication.

    AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000007-0000-0000-c000-000000000000'.

    But message indicates you are using a non-interactive auth flow or at least the app wont display the prompt to the user.

    ERROR REQUESTING Token FROM THE Authentication context - USER intervention required but not permitted by prompt behavior

    One possible solution is to use an interactive flow instead, such as the authorization code flow or the device code flow. These flows allow the user to sign in interactively and satisfy the conditional access policy. If you are already using an interactive flow and still getting this error, you may need to ensure that openid is one of the scopes during the interactive sign-in. You might be getting the error after the interactive sign-in and trying to exchange the authorization code for an access token, which requires openid as a scope.

    The other option is to exclude or disable to policy enforcing MFA.

    Check if Security Defaults being enabled.

    User's image

    Or A Conditional Access policy enforcing MFA

    https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa

    User's image

    Please check if these are enabled.

    Do let me know if you have any further questions, I would be happy to help!

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.