Microsoft Azure AD - error_description:Due to a configuration change made by your administrator, or because you moved to a new location etc

user_9907182 0
Viewed 11417

I am facing ERROR like below when connecting Microsoft Azure AD after enabling MFA. Before that it gets connected. Today while login, it required me to enable this security feature in my Phone(Microsoft Auithenticator APP). Unless this feature added, i can't able to access MS Outlook in Microsoft 365.

I am using WSO2 Outlook Connector to make connection with Microsoft Graph API

ERROR:

"error":"interaction_required","error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000002-0000-0ff1-ce00-000000000000
multi-factor-authentication microsoft-graph-api azure-active-directory wso2
1 Answers

Possible solutions:

  1. Use a interactive flow instead.

  2. If you are using a interactive flow and still getting this error, ensure openid is one of the scopes during the interactive sign-in. You might be getting the error after the interactive sign-in and trying to exchange the authorization code for a access token...

    https://login.microsoftonline.com/contoso.onmicrosoft.com/oauth2/authorize
?client_id=########-####-####-####-############
&response_type=code
&scope=openid groups.read.all
&nonce=1234
&redirect_uri=https://app.contoso.com

    Notice "scope=openid groups.read.all" in the request above.

  3. Add the client application to the exception list of the Conditional Access Policy

  4. Add the user to the exception list of the Conditional Access Policy

  5. If not using conditional access policies and the user is directly enabled for MFA, then as a last resort, disable MFA for the user if solutions above (specifically solution #1 and #2) do not work for you.

user_159692990
Related