A Cloud Shell credential problem occurred

lugger1 0

I try to use Azure clout shell , and during execution of "az login" command I got this error:

A Cloud Shell credential problem occurred. When you report the issue with the error below, please mention the hostname 'SandboxHost-638476176132956009'

Failed to authenticate 8fa2a577-763e-4f76-81a0-dc97d1871254 'Turnberry Solutions Inc' due to error 'AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013'. Trace ID: 68d3e4e5-8977-45de-828d-e0dd8f717300 Correlation ID: e22260b7-b461-4c2b-afd4-8542bd7dd5ce

My account has MFA enabled, so what I need to do to fix it?

2 answers

vipullag-MSFT 24,206 Reputation points Microsoft Employee

2024-04-02T04:54:36.9133333+00:00
Hello lugger1

Welcome to Microsoft Q&A Platform, thanks for posting your query here.

If your account has MFA enabled, you need to use the interactive login method to authenticate with Azure CLI in Azure Cloud Shell.

To do this, follow these steps:

Open Azure Cloud Shell by clicking on the "Cloud Shell" icon in the Azure portal.

Select "PowerShell" or "Bash" as your preferred shell.

Run the "az login" command.

A message will appear asking you to open a web page to authenticate. Follow the instructions to authenticate with your MFA credentials.

Once you have successfully authenticated, you can run Azure CLI commands in Azure Cloud Shell.

Hope this helps.
Please sign in to rate this answer.
lugger1 0 Reputation points

2024-04-02T05:45:36.86+00:00

I am probably missing something, but when executing "az login" command in Azure Cloud Shell, when web page opens, it asks for a code provided by the shell (like open the page https://microsoft.com/devicelogin and enter the code BQA3CDBHQ to authenticate.) When I enter this code in the window which says "Enter code. Enter the code displayed on your app or device." Then there is a window "Pick an account. You're signing in to Microsoft Azure Cross-platform Command Line Interface on another device located in United States. If it's not you, close this page." - this window has my current account with status "Signed in". Then, when I click on my current account, there is a window with question "Are you trying to sign in to Microsoft Azure CLI? Only continue if you downloaded the app from a store or website that you trust." When I click on Continue button, there is a window saying "Microsoft Azure Cross-platform Command Line Interface

You have signed in to the Microsoft Azure Cross-platform Command Line Interface application on your device. You may now close this window." And when I close the tab, in cloud shell I see this error: "A Cloud Shell credential problem occurred. When you report the issue with the error below, please mention the hostname 'SandboxHost-638476176132956009'

Failed to authenticate 8fa2a577-763e-4f76-81a0-dc97d1871254 'Turnberry Solutions Inc' due to error 'AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013'. Trace ID: 6360d017-14ae-4981-b5ff-605e75807500 Correlation ID: b0f0ff80-2b95-4f0f-ac91-41ac15b33bb0"

At no time during this process it asks for 2FA combination (may be because I am already signed i?) My account page, in Security, all the "Ways to prove who you are" are enabled: Email a code, Text a code, Send sign-in notification, Enter a code from an authenticator app, etc. Those methods are used for "Account verification", not for "Account sign in" (only Password is used for "Account sign in"), and I don't see the way to force additional method for "Account sign in". And my Two-step verification is ON.
What am I missing here?

vipullag-MSFT 24,206 Reputation points Microsoft Employee

2024-04-08T01:24:21.2533333+00:00

Hello lugger1

Looks like the issue might be related to the fact that you are already signed in to the Azure portal when you are trying to authenticate in Azure Cloud Shell.

To resolve this issue, you can try the following steps:

Sign out of the Azure portal and close the browser window.

Open a new browser window and navigate to the Azure portal.

Sign in to the Azure portal using your credentials.

Open Azure Cloud Shell and run the "az login" command again.

This should prompt you to enter your credentials and complete the authentication process, including the MFA step if required.

If you are still having issues, you can try using a different browser or clearing your browser cache and cookies before signing in to the Azure portal.

lugger1 0 Reputation points

2024-04-08T03:49:35.3366667+00:00

In my case, the command "az login" failed every time, even if I closed the browser, re-booted laptop, open incognito browser window, cleared cookies and cache ,- nothing helped. But command "az login --tenant <TenantID>" works, and does not give error related to MFA (error AADSTS50079).
Sign in to comment
lugger1 0 Reputation points

2024-04-08T03:54:16.8733333+00:00

In my case command "az login" in Azure Cloud shell failed every time, even if I reboot laptop, use incognito browser window , clear cookies, etc - nothing helped. But command "az login --tenant <TenantID>" works and does not give any errors related to AADSTS50079 (this error is related to MFA required).
Please sign in to rate this answer.
vipullag-MSFT 24,206 Reputation points Microsoft Employee

2024-04-10T05:41:35.7733333+00:00

Hello lugger1

Thanks for confirming that the issue is resolved and sharing the resolution here for the benefit of community.
Sign in to comment