AADSTS75011: Authentication method ‘Password, MultiFactor’ by which the user authenticated with the service doesn’t match requested authentication method ‘X509’

Question

AADSTS75011: Authentication method ‘Password, MultiFactor’ by which the user authenticated with the service doesn’t match requested authentication method ‘X509’

Sazalie Bin Ibrahim 0

*AADSTS75011: Authentication method ‘Password, MultiFactor’ by which the user authenticated with the service doesn’t match requested authentication method ‘X509’. Contact the

1 answer

Your answer

Answer 1

Bandela Siri Chandana 3,055 Microsoft External Staff Moderator

Hi @Sazalie Bin Ibrahim

Thank you for posting your query on Microsoft Q&A.

I understand that you are encountering AADSTS75011 error. Authentication method 'Password, Multifactor' by which the user authenticated with the service doesn't match requested authentication method 'X509'.

This error occurs when you try to sign in to an application that has been set up to use Microsoft Entra ID for identity management by using SAML-based SSO.

Try to ask the app vendor to remove RequestedAuthnContext from SAML request since it's an optional value or to request a Fresh Authentication by setup forceAuthn="true".

For more information. Refer the following document: https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/error-code-AADSTS75011-auth-method-mismatch

Hope this helps. Do let us know if you have any further queries.

If this answers your query, do click `Accept Answer` and `Yes`.

Thanks,

B. Siri Chandana.

Sazalie Bin Ibrahim 0 Reputation points

2024-12-17T10:19:36.38+00:00
Hi @Bandela Siri Chandana Thanks for your reply. Actually only a few users facing issue to log in to the apps via SAML.

Current Situation:

Domain-joined laptops are able to access the apps via SAML authentication as expected.

Non-domain-joined laptops (BYOD), including those enrolled in Microsoft Intune, are facing login issues.

Thanks
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2024-12-18T13:18:04.6566667+00:00

Hi @Sazalie Bin Ibrahim
I understand that you are facing login issues in non-domain-joined laptops (BYOD), including those enrolled in Microsoft Intune.

Please open the Command Prompt on your affected device and type the command dsregcmd /status. After running the command, take a screenshot of the output and send it to me.

Thanks,

B. Siri Chandana
Sazalie Bin Ibrahim 0 Reputation points

2024-12-19T07:24:27.3733333+00:00

Hi @Bandela Siri Chandana ,

Thanks for your reply. Below is the result.

Thanks.
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2024-12-19T12:07:54.98+00:00

Hi @Sazalie Bin Ibrahim

I understand that you are using an Entra registered device, so the PRT will not be presented.

Could you please provide the name of your application and specify how you are accessing it—whether it is through a client or a browser-based application? If you are trying to access the application through a browser, could you let me know which browser you are using? Additionally, please try accessing the application in an incognito tab and share the screenshots.

Again, follow the steps mentioned in the document: https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/error-code-AADSTS75011-auth-method-mismatch

Hope this helps. Do let us know if you have any further queries.

Thanks,

B. Siri Chandana.
Sazalie Bin Ibrahim 0 Reputation points

2024-12-19T13:04:15.9766667+00:00

Hi @Bandela Siri Chandana

Could you please repost back your reply... i cannot see it. Sorry for inconvenience caused.

Thanks
Sazalie Bin Ibrahim 0 Reputation points

2024-12-20T08:08:05.95+00:00

Hi @Bandela Siri Chandana ,

Thanks for your reply. We access the application through a browser. We are using google chrome. For the step that you ask me to follow, the RequestedAuthnContext is necessary, which is I already configured to use x509 and its working as expected using domain join laptop.

Thanks
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2024-12-20T08:44:15.92+00:00

Hi @Sazalie Bin Ibrahim

I understand still you are facing the same issue.As you have mentioned you are using Google Chrome. Check whether you have Google chrome extension. If not add the extension Windows 10 Accounts

For reference: https://learn.microsoft.com/en-us/entra/identity/devices/concept-primary-refresh-token

Hope this helps. Do let us know if you have any further queries.
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2024-12-23T09:35:22.9166667+00:00

Hi @Sazalie Bin Ibrahim
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2024-12-24T10:10:44.0833333+00:00

Hi @Sazalie Bin Ibrahim
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Share via

AADSTS75011: Authentication method ‘Password, MultiFactor’ by which the user authenticated with the service doesn’t match requested authentication method ‘X509’

1 answer

Your answer