Share via

NPS MFA issue, users not advancing to OTP screen after entering the credentials

VirtualAB 0 Reputation points
2024-05-13T18:25:44.23+00:00

Hello Guys,

Would appreciate your help in resolving this issue, Thanks in advance.

After entering user credentials at IdP, it is not moving to OTP step.

Azure MFA with NPS configured.

Verified, NPS service is running and certificate not expired.

Getting this event log on NPS server, it says error communicating with the Azure AD MFA service.

Same setup is working fine till today without any issue, no changes on NW side.

User's image

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,008 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Akhilesh 6,040 Reputation points Microsoft Vendor
    2024-05-16T12:38:39.0233333+00:00

    Hi @AB

    Thank you for post!

    Based on your error screen shot you are getting HTTPS_COMMUNICATION_ERROR which states that unable to receive responses from Microsoft Entra multifactor authentication.

    To resolve this issue, Verify that your firewalls are open bidirectionally for traffic to and from https://adnotifications.windowsazure.com and that TLS 1.2 is enabled (default). If TLS 1.2 is disabled, user authentication fails and event ID 36871 with source SChannel is entered in the System log in Event Viewer. To verify TLS 1.2 is enabled, see TLS registry settings.

    Reference: Troubleshooting steps for common errors

    Hope this helps. Do let us know if you any further queries.

    Thanks,

    Akhilesh.

    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.