30,922 questions with Microsoft Security | Microsoft Entra | Microsoft Entra ID tags

Sort by: Updated
1 answer

MFA push notifications

Hi, currently we’ve a user whereby the old phone were damage and can’t access anymore and had requested for a reset of MFA, we’ve tried revoke all the MFA session and re-register the MFA, after the re-register however when he login to portal.azure, the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Authenticator
asked 2023-11-20T01:31:02.98+00:00
Bernard Lai 1 Reputation point
commented 2026-07-18T15:33:59.2233333+00:00
Niharika Reddy 5 Reputation points
1 answer

What if I lost mobile phone with the authenticator

I lost my mobile in which Microsoft Authenticator is installed. The account is cloud admin. How to get the MFA reset.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-18T12:22:21.4033333+00:00
Niharika Reddy 5 Reputation points
answered 2026-07-18T15:24:45.9633333+00:00
Dilawar Shaikh 0 Reputation points
0 answers

SMS Authentication Failure (Error 399287) Preventing Admin Sign-In

I am trying to sign in to an administrator account that I own, but the SMS verification method is no longer working. When I select phone verification for my tenant directory, I am prompted to verify my identity via SMS. However, as soon as I click the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-18T08:02:58.4366667+00:00
Mojo AI 0 Reputation points
1 answer

Best practice for cross-tenant ACR image pull during customer ARM template deployment (without sharing admin credentials)

We are an ISV shipping a FinOps application as container images hosted in OUR Azure Container Registry (ACR). Customers deploy the application into THEIR OWN Azure subscription (a separate Entra/AAD tenant) using an ARM template we provide. The template…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-18T05:54:51.15+00:00
Ajay Kumar 0 Reputation points
answered 2026-07-18T05:55:17.37+00:00

AI answer

0 answers

AADSTS5000224 – End-customer tenant deprovisioned and inaccessible

Hello, I am a Microsoft Partner based in Morocco, and the affected tenant is our company’s own Microsoft tenant, Digitacodin. We have suddenly lost access to all Microsoft services associated with this tenant, including: Microsoft 365 Admin Center …

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-18T03:42:39.9766667+00:00
yassin sabil 0 Reputation points
edited the question 2026-07-18T04:18:22.4+00:00
yassin sabil 0 Reputation points
4 answers One of the answers was accepted by the question author.

Entra SCIM provisioning – OAuth2 Client Credentials Grant sends two sets of client credentials to token endpoint (Basic and form), causing token issuance to fail

I am trying to configure SCIM provisioning to a non-gallery app using the very new option of OAuth2 Client Credentials authentication, but the connection test is returning an error. This is because the provisioning service’s token request includes…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2025-08-06T14:59:56.0766667+00:00
Andy Paciocco 25 Reputation points
answered 2026-07-17T21:06:39.2266667+00:00
Jeevan Desarda 91 Reputation points Microsoft Employee
2 answers One of the answers was accepted by the question author.

Enterprise App not showing showing as a cloud app in Conditional access

Hi, I've registered a new app using "App registration" and it is showing as an application in under the "Enterprise applications" tab in Microsoft Entra ID. I want to excluded this app from mfa in Conditional Access, but I can't find…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2024-01-24T17:03:26.19+00:00
Brian Liu 160 Reputation points
commented 2026-07-17T17:11:11.03+00:00
Jason Hensley 6 Reputation points
1 answer

AADSTS5000224 - production tenant deauthenticated, all users and break-glass admin locked out

Our production tenant is returning AADSTS5000224 (“The tenant you are trying to access has been deauthenticated and is no longer available”) for every sign-in attempt. This began today, July 15, 2026 What we’ve confirmed **•** The OpenID configuration…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-16T00:01:24.7333333+00:00
random26253 0 Reputation points
commented 2026-07-17T14:23:35.1033333+00:00
random26253 0 Reputation points
0 answers

Error installing entra connect sync

Microsoft Entra Connect could not configure application-based authentication for this server. Setup cannot continue.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-16T17:13:36.6566667+00:00
Galied Mahmood 0 Reputation points
commented 2026-07-17T13:26:29+00:00
G. Mahmood 0 Reputation points
1 answer

Azure AD B2C: Verification emails not being received on specific tenant

We are experiencing an issue with our Azure AD B2C tenant where email verification codes (for the "Forgot Password" flow) are not being received by users. We can confirm the following: The Audit Logs show that the email was successfully sent…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-17T10:12:20.3466667+00:00
Vieri Teughels 0 Reputation points
answered 2026-07-17T12:10:53.6+00:00
Sina Salam 30,566 Reputation points Volunteer Moderator
0 answers

Questions about Microsoft Entra Agent Identities, Microsoft Graph APIs, and Service Principals

Hi Microsoft Team, I'm evaluating the new Microsoft Entra Agent ID capability and have a few questions regarding Agent Identities and their relationship with Service Principals. 1. Programmatically retrieving Agent Identities What is the recommended way…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-17T08:09:47.9666667+00:00
Dey, Dipronil 0 Reputation points
0 answers

An inherited or group assignment cannot be extended

I cannot extend my azure resources. I received the email from MSSecurity-noreply@microsoft.com to Your Classic Network Contributor role in the 3slocaldebug resourcegroup will expire in 14 day(s) Review the details of the original assignment and if…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-17T07:36:02.75+00:00
Ewelina Flisak 0 Reputation points Microsoft Employee
0 answers

Invitations are blocked for this directory due to suspicious activity.Please contact Microsoft support for help.

I am trying invite external users by Graph API New-MgInvitation commandlet. After over 8 users invite complete , the request is blocked with error message: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-17T07:17:12.79+00:00
01_最高検 管理者1 0 Reputation points
2 answers

Tenant lockout - Only Global Admin lost MFA device

Hello, I am assisting one of our clients with a Microsoft Entra ID tenant lockout. The only Global Administrator in the tenant has lost access to the Microsoft Authenticator app after a phone reset/replacement. MFA is required, and Microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-14T00:02:37.1833333+00:00
Joemer Reyes 0 Reputation points
edited a comment 2026-07-17T06:49:38.75+00:00
Nam-D 3,880 Reputation points Microsoft External Staff Moderator
2 answers

Conditional access policy is not being applied to MS Graph even though it is not excluded

We have a CA policy to require MFA via EAM that is set to apply to all Cloud Apps except one specific one that we have selected. The company recently set up SSO with DocLink and when this is used it is not requiring MFA. When I look at the Sign In Logs…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2025-08-13T15:46:36.78+00:00
ITQue techs 0 Reputation points
commented 2026-07-17T06:39:07.18+00:00
James Cuneo 0 Reputation points
1 answer

Is there another way to get in contact with the data protection team for a lockout scenario?

Hello, I have a 365 business account in which I got locked out of recently. I am the sole global administrator for the account. MS Authenticator is what's stopping me from logging in ultimately. I have my onmicrosoft.com email address and correct…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-17T00:24:50.8+00:00
james warren 0 Reputation points
answered 2026-07-17T06:21:58.6333333+00:00
Helen Luu 1,255 Reputation points Independent Advisor
1 answer

Sole Global Admin locked out — Microsoft Authenticator MFA loop after iPhone restore, no other admin, no backup MFA method

I am the sole Global Administrator of a Microsoft 365 for Business tenant and am completely locked out due to a Microsoft Authenticator MFA issue. There is no other Global Administrator and no other registered MFA method. Tenant Details Domain:…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-14T09:02:22.6333333+00:00
Hong 0 Reputation points
edited the question 2026-07-17T06:07:14.5933333+00:00
Kai-Ex 1,480 Reputation points Microsoft External Staff Moderator
2 answers

What is Microsoft’s supported recovery process when the sole Global Administrator loses all MFA methods?

Our Microsoft 365 business tenant has one Global Administrator who no longer has access to the registered MFA methods. There is no secondary administrator available. Self-service recovery is unavailable. What Microsoft-supported process should the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-16T23:13:28+00:00
Muhammad Sohaib Ehsan 0 Reputation points
answered 2026-07-17T06:04:09.5433333+00:00
Killian N 2,225 Reputation points Independent Advisor
0 answers

Bucle inicio de sesión

Necesito ayuda ya que no estoy logrando iniciar sesión en mi cuenta de azure, especificamente es la versión para estudiantes, me registre y me llegó el correo de que se logró con exito utilizando mi correo institucional, pero al momento de iniciar sesión…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-17T05:27:32.46+00:00
Alejandro Espinoza 0 Reputation points
0 answers

Sole Global Admin locked out — Authenticator shows 8-digit setup code, sign-in requires 6-digit code

I'm the sole Global Administrator on my Azure tenant and I'm completely locked out. Background: I sign in to Azure using a personal Microsoft/Hotmail account, tied to a tenant with directory name "DP" . Sign-in worked normally until a couple of…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-07-16T20:30:39.7666667+00:00
Dhaval Parekh 0 Reputation points