AADSTS50076: Due To A Configuration Change Made By The Administrator, or Due To Moving To A New Location, Use Multi-Factor Authentication To Access [Microsoft Office 365]

News Knowledge Base
1

How to fix AADSTS50076?

Issue Description: When using UsernameAndPassword authentication from Office 365 Scope, the following error is thrown when trying to authenticate

Full Error In Text:

RemoteException wrapping Microsoft.Graph.ServiceException: Code: generalException

Message: An error occurred sending the request.

 ---> RemoteException wrapping Microsoft.Identity.Client.MsalUiRequiredException: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'.

Root Cause:

The user that is performing the authentication has Multi-Factor Authentication (MFA) enabled or enforced.

It can be enabled per user, per organization or enforced via Conditional Access Policies. Read more on

How to manage those settings in Microsoft 365? .

Resolution:

  • Disable MFA for that user/exclude him from the policy that enforces MFA.

Security wise, the authentication can be further enhanced by applying a Conditional Access Policy based on IP.

Reach out to the Azure Admin for more information on the above.