question

LuisGuzmn-7292 avatar image
0 Votes"
LuisGuzmn-7292 asked LuisGuzmn-7292 answered

AADSTS50076: ue to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

Hi,

I have a 365 developer 90 day trial I´m using for learning Office 365 development.

For 14 days, every time I tried to log in to the Azure Portal or the Office 365 tenant, it would prompt me to set up a multifactor authentication with the Microsoft authenticate app. And I was just clicking the ignore button.

Today, it was my last available day for ignoring it and I configured the multifactor authentication requested with the app and another email just to be able to continue with the learning path...

However now, I cannot authenticate from a dotnet console app I have been using to learn Microsoft graph because just username/password is not valid for me to get an authenticated token for a graph client in this console app.


This is the way I´m trying to connect to a graph client: (as you could see it's just username/password)
119109-image.png

And finally this, is the error I´m getting:

"error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'.

Is there a way to just don´t use or require multifactor authentication in my whole 365 environment?

I tried going up to my office 365 admin center>multi-factor authentication settings, but it appears like if multi-factor was disabled for my account:

119135-image.png



Why is this happening? Can I just configure all my organization to just work with username/password authentication?

Kind regards,
Luis



azure-ad-multi-factor-authenticationazure-ad-app-registration
image.png (4.7 KiB)
image.png (27.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LuisGuzmn-7292 avatar image
0 Votes"
LuisGuzmn-7292 answered

I found out whenever a new azure active directory tenant is created. It would have configured some default security measures. Those were the ones prohibiting me to log in without two factor authentication.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

I disabled those in order to continue with my learning path. Of course I made this because my tenant is just a 90 day trail for practicing. In case yo do require a proper tenant for production purposes, it wouldn't be such a great idea to disable those without first configuring some personalized security settings.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.