User is getting Sign-in error code 50076: Due to a config change you must use MFA

Matt Hart 6

Hi, getting a weird issue. It's only happening with one user. They are getting flagged with: Sign-in error code
50076: Due to a configuration change you must use MFA to access 'resource'.
We use 3rd party MFA so we don't have any MFA policies enforced. Checked user, they are set the same as everyone else, MFA is disabled.
Any ideas?
Thanks!

Givary-MSFT 27,886 Reputation points Microsoft Employee

2022-04-26T07:01:30.69+00:00

@Matt Hart

Thank you for reaching out to us. As per my understanding you are trying to investigate the error code 50076 for specific user.

Yes you are right, due to a configuration change, user must use mfa to access resource. As you mentioned you use 3rd party mfa and mfa is not enforced as well.

Wanted to check do you have Azure AD identity protection in use ? any conditional access policies triggering mfa ?

Also can you help me with the sign in logs information where you see error code 50076 for the user, would like to check the correlation id of the request and investigate from there.

Let me know if you have any questions.
Matt Hart 6 Reputation points

2022-04-27T16:39:31.08+00:00

OK I've gotten some more details.
Our user was given access to another company's SharePoint site, and he was required to use Microsoft MFA to sign in to their SharePoint. Since then, he cannot sign in with his credentials to our 365 tenant. I can't connect Outlook or sign in to OneDrive. Web access still works but I suspect that this is because of the "Keep me signed in" and suspect that it won't work after a few days.
We have no conditional access policies that apply MFA, even checking with AzureAD there are no policies applied to his account.
Any ideas?
Thanks!
Matt Hart 6 Reputation points

2022-04-27T18:47:48.207+00:00

Hi, I tried to send an email to azcommunity@microsoft.com but got a bounce back that the account didn't exist at Microsoft.