AADSTS50076: ue to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

Question

Hi,

I have a 365 developer 90 day trial I´m using for learning Office 365 development.

For 14 days, every time I tried to log in to the Azure Portal or the Office 365 tenant, it would prompt me to set up a multifactor authentication with the Microsoft authenticate app. And I was just clicking the ignore button.

Today, it was my last available day for ignoring it and I configured the multifactor authentication requested with the app and another email just to be able to continue with the learning path...

However now, I cannot authenticate from a dotnet console app I have been using to learn Microsoft graph because just username/password is not valid for me to get an authenticated token for a graph client in this console app.

This is the way I´m trying to connect to a graph client: (as you could see it's just username/password)

And finally this, is the error I´m getting:

"error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'.

Is there a way to just don´t use or require multifactor authentication in my whole 365 environment?

I tried going up to my office 365 admin center>multi-factor authentication settings, but it appears like if multi-factor was disabled for my account:

Why is this happening? Can I just configure all my organization to just work with username/password authentication?

Kind regards,
Luis

Answer 1

I found out whenever a new azure active directory tenant is created. It would have configured some default security measures. Those were the ones prohibiting me to log in without two factor authentication.

Reference:
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

I disabled those in order to continue with my learning path. Of course I made this because my tenant is just a 90 day trail for practicing. In case yo do require a proper tenant for production purposes, it wouldn't be such a great idea to disable those without first configuring some personalized security settings.