Error when enabling MultiFactor on an account

Question

We are enabling MFA to a lot of our users. I have enabled about 550 users, and all works fine, except for 1 user. I got the error:

There was an error while enabling multi-factor authentication.

Correlation ID: XXXXXXXXXXXXXXXXXXXXXXXX      <---Changes on every attempt

If I try With Powershell, I got the error:

Set-MsolUser : Invalid value for parameter.  Parameter Name: LiveId.

At line:1 char:1

• Set-MsolUser -UserPrincipalName xxxx@xxxxx -StrongAuthe ...

    + CategoryInfo          : OperationStopped: (:) [Set-MsolUser], MicrosoftOnlineException

    + FullyQualifiedErrorId : Microsoft.Online.Administration.Automation.PropertyValidationException,Microsoft.Online.Administration.Automation.SetUser

We have tried with an other Global Admin user and got the same error.

Answer 1

Hi Martin,

We have received the requested information via the PM. The behavior you reported is not what we commonly encounter. We have engaged the relevant team to continue to assist you with this. You will be contacted via email for further troubleshooting. We will share the solution to the community once you confirm that this is resolved. Community members will benefit from your sharing.

Thanks,

Jim

Answer 2

Hi Martin,

I want to double-confirm if you set up MFA for that specific user in PowerShell with the same steps mentioned in the article below (PowerShellsection).

PowerShell: Enable/Enforce Multifactor Authentication for All (Bulk) Users in Office 365

Regards,

Tim

Answer 3

Hi Martin,

To move forward on this thread, I need to collect some further tenant info. Please check my private message and share with us the info when you have time.

Regards,

Tim

Answer 4

Hi,

1. All users are synced from local AD.
2. Yes, the user can Access all services in Office 365.

Answer 5

Hi Martin,

To better understand the situation, I'd like to confirm the following things:

1. What is the environment for your tenant, are all users created in Office 365 portal or synced to cloud from local AD?
2. Is this user able to access Office 365 portal and use all services according to his license?
3. Email address of the problematic account. For privacy protection, I have sent you a private message to collect the account email address.

Best regards,

Tim