Only administrator in the directory is seeing error message: AADSTS50079

Matt Peterson 10

The only administrator in the directory that we're trying to switch to is now seeing the following error message when attempting to switch to the directory tenant. AADSTS50079 Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication... How do we fix this error message if we can't switch to the directory to change conditional access policy of MFA settings?

JimmySalian-2011 42,071 Reputation points

2024-02-02T16:36:23.2666667+00:00

Hi Matt,

Do you have Conditional policy configured?If yes then the account and app is not allowed to bypass MFA as it is not configured for MFA, so you will need backdoor account or backup account to allow the App and Admin Accoutn configured for MFA as the account is not configured for MFA it is failing.

Also try Incognito mode as your account might be cached?

Hope this helps. JS

== Please Accept the answer if the information helped you. This will help us and others in the community as well.
Matt Peterson 10 Reputation points

2024-02-02T17:19:51.97+00:00

The tenants were created with Security Defaults which enable MFA for the entire tenant. The administrator missed the 14day grace period for enrollment. There is only one user in the tenant -- the administrator's user.
André Arsenault 5 Reputation points

2024-02-02T22:48:13.2566667+00:00

This is definitively a Microsoft Issue since i was offered the 14 days grace period which allows me to go in the Azure portal in order to deactivate the 2FA. But this time, once I click the option to wait, everything went crashing big time.

Login page flashing in loop and error message very miss leading.

Share via

Only administrator in the directory is seeing error message: AADSTS50079