Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,891 questions
User is getting Sign-in error code 50076: Due to a config change you must use MFA
Matt Hart
1
Reputation point
Hi, getting a weird issue. It's only happening with one user. They are getting flagged with: Sign-in error code
50076: Due to a configuration change you must use MFA to access 'resource'.
We use 3rd party MFA so we don't have any MFA policies enforced. Checked user, they are set the same as everyone else, MFA is disabled.
Any ideas?
Thanks!
{count} votes
-
Givary-MSFT 14,806 Reputation points Microsoft Employee
2022-04-26T07:01:30.69+00:00 Thank you for reaching out to us. As per my understanding you are trying to investigate the error code 50076 for specific user.
Yes you are right, due to a configuration change, user must use mfa to access resource. As you mentioned you use 3rd party mfa and mfa is not enforced as well.
Wanted to check do you have Azure AD identity protection in use ? any conditional access policies triggering mfa ?
Also can you help me with the sign in logs information where you see error code 50076 for the user, would like to check the correlation id of the request and investigate from there.
Let me know if you have any questions.
-
Matt Hart 1 Reputation point
2022-04-27T16:39:31.08+00:00 OK I've gotten some more details.
Our user was given access to another company's SharePoint site, and he was required to use Microsoft MFA to sign in to their SharePoint. Since then, he cannot sign in with his credentials to our 365 tenant. I can't connect Outlook or sign in to OneDrive. Web access still works but I suspect that this is because of the "Keep me signed in" and suspect that it won't work after a few days.
We have no conditional access policies that apply MFA, even checking with AzureAD there are no policies applied to his account.
Any ideas?
Thanks! -
Matt Hart 1 Reputation point
2022-04-27T18:47:48.207+00:00 Hi, I tried to send an email to azcommunity@microsoft.com but got a bounce back that the account didn't exist at Microsoft.
Sign in to comment