25,081 questions
Application Microsoft Azure CLI in sign in log azure AD
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 8%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETV%3C/text%3E%3C/svg%3E)
Tran Van Thuan
0
Reputation points
hi there Recently I checked the Azure admin sign log and saw many users having errors when logging in. I was surprised to see Application: Microsoft Azure CLI. I was quite curious about what this app was and why it was displayed on the log.
Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 89%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHE%3C/text%3E%3C/svg%3E)
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator2024-12-30T23:19:21.1166667+00:00 Hi @ Tran Van Thuan •
Thank you for reaching out Microsoft Q&A.
I understand that you are encountering the error message “Failure reason - Error validating credentials due to invalid username or password” typically occurs when a user enters incorrect credentials. This is a common issue, particularly with the Azure Command-Line Interface (CLI), which is a cross-platform tool used for managing Azure resources.
Error code 50126 often arises in scenarios where Multi-Factor Authentication (MFA) is enabled. In such cases, non-interactive logins are not supported, as MFA requires user interaction to complete the authentication process.
Also, federation authentication may typically cause this error It is important to note that federated authentication does not necessarily imply the use of Active Directory Federation Services (ADFS); third-party identity providers such as Auth0, OneLogin, or others may also be used. When making API calls through applications like Postman, which cannot handle the authentication redirection, users may encounter the "invalid username or password" error.
For non-interactive user sign-ins, authentication failures are not uncommon and can be caused by various factors, including incorrect credential input.
To address this, it is recommended to ensure that legacy authentication protocols are disabled or restricted to specific use cases. Any misconfigurations could lead to unexpected authentication errors.
Additionally, it is advisable to review Azure AD sign-in logs for further insights into these failed sign-in attempts. This can help identify patterns or commonalities, such as specific users or times of occurrence.
It may also be useful to examine network and firewall logs for any unusual traffic that could be associated with these authentication attempts, potentially revealing the source or patterns of the failures.
Hope this helps. Do let us know if you have any further queries.
Regards,
Harshitha Eligeti. -
Tran Van Thuan 0 Reputation points
2024-12-31T01:56:28.3866667+00:00 I mean why is there an MFA authentication error but the application is azure CLI, my user doesn't use CLI
-
Tran Van Thuan 0 Reputation points
2024-12-31T01:57:22.2466667+00:00 I mean why is there an MFA authentication error but the application is azure CLI, my user doesn't use CLI
-
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator
2025-01-02T19:00:53.8233333+00:00 Hi @ Tran Van Thuan •
The Microsoft Azure CLI is a cross-platform command-line tool that allows users to manage Azure resources. Even if a user does not actively use the Azure CLI, it can still appear in the sign-in logs if the user attempts to authenticate using the application.The error code 50126 indicates that there was an issue validating credentials due to an invalid username or password. This can happen for several reasons, including:
1.The user might have entered a wrong username or password.
2.If MFA is enabled, then non-interactive logins, such as those from the CLI, are likely to fail because they cannot perform the MFA process that requires user interaction.
3.If the user is authenticated using a federated identity provider, then a problem with the configuration of that provider can cause authentication failures as well.Even if a user does not directly use the Azure CLI, automated processes that attempt to authenticate using the CLI can generate these logs. It is, therefore, important to review the Entra ID sign-in logs for further insights and to ensure that any legacy authentication protocols are disabled.
Regards,
Harshitha Eligeti. -
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator
2025-01-03T20:00:24.8766667+00:00 Hi @ Tran Van Thuan •
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help. -
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator
2025-01-06T09:29:51.79+00:00 Hi @ Tran Van Thuan •
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment
Sign in to answer