Forum Discussion
How to troubleshoot excessive MFA prompts
I received a call today for one user that experience an excessive amount of MFA prompts. We have MFA deployed via a conditional access rule.
Looking at the sign-ins report for this user we have confirmed the IPs that i see is his external IP but there is a lot of failures and interrupted.
His MFA settings is to be notified via the phone app.
How do I troubleshoot this? I would typically ask people to reboot and then im not sure if we should go in and just reset the authenticator app and redo the https://aka.ms/mfasetup where we remove the apps that he has setup??
I really have no idea 🙂
RippieUK Hello Ronnie, we have a lot of experts on MFA and CA in the community, so I'm just gonna suggest to revoke the sessions until someone gives you a detailed explanation 😉 https://docs.microsoft.com/bs-latn-ba/azure/active-directory/authentication/howto-mfa-userdevicesettings#manage-user-authentication-options
ChristianBergstrom Hi there, thank you for that. I have never really thought about giving that a try. thank you
- Did resetting user's session solve your issue? If not, do you have any further details? Do these prompts happen randomly or on a specific action? What are your conditions in CA for this user / device? Have you tried exiting the apps that might auth in background (such as OneDrive client?
Vikram V
I'm currently facing the same issue with my own account. Interestingly enough, I've no such issues in a VMware virtual machine running on the very same physical machine... Reviewing the sign in activities of my account on portal.azure.com, I've noticed quite a lot of "interrupted" entries with "Strong Authentication is required." as the failure reason. Any ideas?!?Hello, wow this was an old conversation! Any chance you're using legacy authentication protocols not supporting MFA (not using modern authentication) or any other scenario related to not satisfying MFA?
Could this be your error code?
AADSTS50074 UserStrongAuthClientAuthNRequiredInterrupt - Strong authentication is required and the user did not pass the MFA challenge.
Azure AD authentication & authorization error codes | Microsoft Docs
