AADSTS50158: External security challenge not satisfied. User will be redirected to another page or authentication provider to satisfy additional authentication challenges.

Vyas, Manish (UBS) 31 Reputation points
2021-05-28T14:35:30.563+00:00

I have been facing issue while connecting using 'Azure Active Directory - Password'

To use this I have already add my AD account to Sql Server Active Directory Admin. Earlier we are able to connect using AD Admin but Now we are not able to sign in and here is the error message. Also it did not redirect my user .

TITLE: Connect to Server


Cannot connect to sqlsvr-idv-sta-dev.database.windows.net.


ADDITIONAL INFORMATION:

One or more errors occurred. (mscorlib)


One or more errors occurred. (mscorlib)


AADSTS50158: External security challenge not satisfied. User will be redirected to another page or authentication provider to satisfy additional authentication challenges.
Trace ID: fc689c89-1b8e-4dc8-8df9-39650cb12e01
Correlation ID: 64348b79-5cdc-4f00-b89f-523652686863
Timestamp: 2021-05-28 13:54:47Z (System.Data)


Additional Details:

at ADALNativeWrapper.ADALGetAccessToken(String username, IntPtr password, String stsURL, String servicePrincipalName, ValueType correlationId, String clientId, Boolean* fWindowsIntegrated, Int64& fileTime)
at ADALNativeWrapper.ADALGetAccessToken(String username, String password, String stsURL, String servicePrincipalName, ValueType correlationId, String clientId, Int64& fileTime)
at System.Data.SqlClient.ActiveDirectoryNativeAuthenticationProvider.<>c__DisplayClass2_0.\

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,279 questions
0 comments No comments
{count} vote

Accepted answer
  1. Alberto Morillo 34,651 Reputation points MVP
    2021-05-28T14:48:46.217+00:00

    If MFA is enabled, disable MFA (multifactor authentication) and try again. Conditional access enabled may be another possible cause, please disable them and try again.

    If one of the above solve the issue, then examine your application configuration.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Vyas, Manish (UBS) 31 Reputation points
    2021-05-28T14:57:35.307+00:00

    Hey AlbertoMorillo,

    Thanks for your Answer and it give me idea that why it failed because earlier we do not have that policy but near to 10 days company just applied on all user account and unfortunately I cannot control that ,is there any other option.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.