How to fix the error "AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

Francescopio Pascale 105

hello I am trying to make a request to obtain the token "https://login.microsoftonline.com/organizations/oauth2/v2.0/token" where I have set all the various fields in the body, such as client_id, scope, username, password, client_secret and grant_type = password. However, I get this error: "AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access", I tried to remove multi-factor authentication in Azure, but I noticed that it's not actually enabled, so it's like it's set by default, how can I fix it?

Armando Contestabile 0 Reputation points

2023-08-10T07:29:15.6766667+00:00

I get the same error trying to sign in with Visual Studio Code to sync the settings in cloud. The account I am using is enabled to use MFA in my work environment.

"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'.
Trace ID: ....
Correlation ID: ....
Timestamp: 2023-08-10 07:23:22Z"
Dick van Straaten 0 Reputation points

2023-08-10T19:40:18.57+00:00

I have the same error message:

Invalid_grant: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access.

Strange message because multi-factor authentication is enabled and configured. But I do notice an error message in the console of the browser:

Failed to load resource: the server responded with a status of 400 (Bad Request), https://login.microsoftonline.com/be501e6b-bfb7-4e76-9d03-2c567ac6d8a6/oauth2/v2.0/token

When I follow the link I receive an other error:

AADSTS900561: The endpoint only accepts POST, OPTIONS requests. Received a GET request.

In the log I found the message that MFA was interrupted by the User, while I never received an MFA request. I guess the exception in the console is causing the interruption. Doesn't seem like something my administrator can fix?
Dick van Straaten 0 Reputation points

2023-08-10T19:42:04.89+00:00

Small extra note, in my case I am redirected to https://portal.azure.com.mcas.ms/#home, because defender is active. Could this be related?
Floris vdZ 6 Reputation points

2023-08-22T14:39:00.3233333+00:00

We have the same problem. It started a couple of weeks ago. Before it worked fine.

We have 1Password SSO and get this error on Windows PCs. We don't get this error on iPhone using Edge browser.
mike010101 0 Reputation points

2023-09-05T19:45:13.3666667+00:00

Im seeing this same error, but from a terraform script that is trying to access a resource i created using my a/d login/pwd.
Max Stewart 1 Reputation point

2023-09-30T11:32:13.5333333+00:00
I have installed Azure AD Powershell.

To use it, I get credentials with e.g. $AzureAdCred = Get-Credential

I am prompted for userid and password. The 365 Identity / Enterprise applications sign-in log says these were accepted successfully. All apparently good so far.

I then try to connect using Connect-AzureAD -Credential $AzureAdCred and receive the AADSTS50076 error.

The 365 Identity / Enterprise Applications sign-in log says:

Status : Interrupted Application: Azure Active Directory PowerShell Additional Details: User needs to perform multi-factor authentication

However, the MSFT account has long had MFA switched on, but neither the Get-Credential nor the Connect-AzureAD gave an MFA prompt.
WimPOST-6362 0 Reputation points

2023-10-19T07:42:16.21+00:00

I get this error when simply reading an item in MS Word Help about predictive text. After showing the associated help text for a couple of seconds, the Help panel switches to showing this error. Our organisation had MFA and I am properly logged on to MS Office/Word, so very weird to get this error.
Westley Hall 6 Reputation points

2025-07-11T00:28:42.9166667+00:00

This is old, but legacy SharePoint authentication is credential based, and if MFA is required, it prevents legacy SharePoint auth from working. You can use PnP to get a clientContext that uses modern auth- https://pnp.github.io/powershell/cmdlets/Get-PnPContext.html
You'll need to authenticate first using the connect-pnponline command, and that needs to be set up with registering your application https://pnp.github.io/powershell/articles/registerapplication.html
Mason 0 Reputation points

2026-04-20T16:29:11.39+00:00
I solved this issue by re authenticating to my data source from the Power BI web semantic model. (For context, I am working on Power BI web, pulling data from Azure DevOps to "My Workspace.")

I got the following error: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

To solve this:

In power BI web, go to your semantic model

Go to settings (the gear in the upper left)

Under Data Source Credentials -> VSTS, select Edit credentials

Select Sign in

once you sign in, refresh the semantic model, and the error should be gone.

8 answers

Atul 0 Reputation points

2025-01-02T14:23:27.3766667+00:00
This is indeed a nasty bug and because of this Microsoft Azure kept me me away for three days from subscription that I was given access to. This issue suddenly emerged. When everything was working fine, one fine day I just stopped getting notification to Microsoft Authenticator, without any reason!

Solution is you need your admin (in my case it was my client's admin) to revoke MFA for your user id.
1. Admin need to go here: https://portal.azure.com/#home
2. Then <Your org>| Users -> Users -> <your username>
3. You will see screen something like this ((The screenshot below shows these options disabled but for an Admin it should be enabled)
Here the admin has to click on "Require re-register multifactor authentication" and "Revoke multifactor authentication sessions"
1. Ask admin to do this for all directories (with and without subscriptions)
2. Once done, try logging in to your Azure account and try to access subscription on https://portal.azure.com#home This time it will run you through wizard as if you are adding Microsoft Authenticator for the first time. Once the wizard is complete you are all set.
This is so bad on the part of Microsoft that they didn't even care to see if authenticator has received or not the notification (verification numbers) they sent to it!
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Juan Manuel Conde 0 Reputation points

2024-06-11T20:36:39.9833333+00:00

configurar acceso condicional si es que esta deshabilitada las politicas de seguridad predeterminada. se puede usar plantillas de seguridad y excluir a las cuentas de sistema como la que usas en Azure ad connect. tienen un nombre asi "On-Premises Directory Synchronization Service Account"
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Harshvir Bhati 26 Reputation points

2024-03-14T15:25:34.7433333+00:00

Hello,

I just had the issue and I was able to resolve it after the az login command on PowerShell, then I ran the az get access token.

I hope this helps.
Was this answer helpful?
Anonymous

2025-01-02T04:55:50.2133333+00:00

How exactly did you ran az get access token in PowerShell?
Get-AzAccessToken : The term 'Get-AzAccessToken' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.

Ramyapriya Pasula 40 Reputation points

2025-01-07T09:17:09.24+00:00

After the az login and get access token, what should be done? didnt get exactly what you told @Harshvir Bhati
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

How to fix the error "AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

8 answers

Your answer