Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,702 questions
Only administrator in the directory is seeing error message: AADSTS50079
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 74%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Matt Peterson
10
Reputation points
The only administrator in the directory that we're trying to switch to is now seeing the following error message when attempting to switch to the directory tenant. AADSTS50079 Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication... How do we fix this error message if we can't switch to the directory to change conditional access policy of MFA settings?
{count} vote
-
JimmySalian-2011 42,256 Reputation points2024-02-02T16:36:23.2666667+00:00 Hi Matt,
Do you have Conditional policy configured?If yes then the account and app is not allowed to bypass MFA as it is not configured for MFA, so you will need backdoor account or backup account to allow the App and Admin Accoutn configured for MFA as the account is not configured for MFA it is failing.
Also try Incognito mode as your account might be cached?
Hope this helps. JS
== Please Accept the answer if the information helped you. This will help us and others in the community as well.
-
Matt Peterson 10 Reputation points
2024-02-02T17:19:51.97+00:00 The tenants were created with Security Defaults which enable MFA for the entire tenant. The administrator missed the 14day grace period for enrollment. There is only one user in the tenant -- the administrator's user.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 17%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
André Arsenault 5 Reputation points2024-02-02T22:48:13.2566667+00:00 This is definitively a Microsoft Issue since i was offered the 14 days grace period which allows me to go in the Azure portal in order to deactivate the 2FA. But this time, once I click the option to wait, everything went crashing big time.
Login page flashing in loop and error message very miss leading.
Sign in to comment
Sign in to answer