MS Teams - Password or username incorrect for single user

Question

Environment:
Single Forest On-Prem Active Directory with Azure AD Connect.

Issue:
Error message for user is that the password was incorrect. Details at the login window for the end-user give error code 50058. Azure Sign-In logs show Error Code 50126.

Steps I've taken:
I changed the password on-prem and see that the pwdLastSet attrib in the Metaverse Search in the Synchronization Service Manager on the On-Prem DC had a last modified date/time that matched the password change. All Connector Operations are coming back "success" with no flow errors.

I've uninstalled Teams from the user's computer, cleared contents from \%appdata%\Microsoft\Teams\ directory, and rebooted, re-installed Teams.

I've checked Credentials manager and did not find any credentials that look like MS Teams.

I've checked that the UPN matches the login name from the On-Prem AD user and it's the same as the Azure UPN listed for that user.

Any ideas for a next step?

Answer 1

Hi @G I Jones

Thanks for your feedback above which shared more information and glad to know that your issue is resolved now! Since our forum has the policy that The question author cannot accept their own answer. They can only accept answers by others, and according to the scenario introduced here: Answering your own questions on Microsoft Q&A

I would make a brief summary of this post so that other forum members could easily find useful information here:

[Activating lagged copies - Summary]

Issue Symptom:

Error message for user is that the password was incorrect. Details at the login window for the end-user give error code 50058. Azure Sign-In logs show Error Code 50126.

Solution:

Reconfigured the AD Connect for Password Hash Sync and created the appropriate GPO for the SSO, and everything is working.

You could "Accept Answer" for this summary to close this thread, and your action would be helpful to other users who encounter the same issue and read this thread. Thanks for your understanding!

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---

Answer 2

So apparently, when I set up AD Connect, under the Sign-In section, I selected the "do not configure" option, whereas I should have selected the Password Hash Sync w/SSO option.

I've reconfigured the AD Connect for Password Hash Sync and created the appropriate GPO for the SSO, and everything is working.