Forum Discussion

RippieUK's avatar
RippieUK
Brass Contributor
May 13, 2020

How to troubleshoot excessive MFA prompts

I received a call today for one user that experience an excessive amount of MFA prompts. We have MFA deployed via a conditional access rule.   Looking at the sign-ins report for this user we have c...
Azure Active Directory (AAD)
Vikram V's avatar
Vikram V
Brass Contributor
May 15, 2020
Did resetting user's session solve your issue? If not, do you have any further details? Do these prompts happen randomly or on a specific action? What are your conditions in CA for this user / device? Have you tried exiting the apps that might auth in background (such as OneDrive client?
Rick's avatar
Rick
Copper Contributor
Apr 15, 2021

Vikram V 
I'm currently facing the same issue with my own account. Interestingly enough, I've no such issues in a VMware virtual machine running on the very same physical machine... Reviewing the sign in activities of my account on portal.azure.com, I've noticed quite a lot of "interrupted" entries with "Strong Authentication is required." as the failure reason. Any ideas?!? 

  • ChristianBergstrom's avatar
    ChristianBergstrom
    Silver Contributor
    Apr 15, 2021

    Hello, wow this was an old conversation! Any chance you're using legacy authentication protocols not supporting MFA (not using modern authentication) or any other scenario related to not satisfying MFA?

     

    Could this be your error code?

     

    AADSTS50074 UserStrongAuthClientAuthNRequiredInterrupt - Strong authentication is required and the user did not pass the MFA challenge.

     

    https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes#aadsts-error-codes

    • Rick's avatar
      Rick
      Copper Contributor
      Apr 16, 2021

      ChristianBergstrom 

       

      Looks like I finally found kind of a fix for the issue. At first I tried revoking my MFA-sessions and re-registered for MFA, but that didn't have the desired effect - the excessive MFA prompts persisted.
      However, in addition to my laptop, I also have a PC registered with my account running in one of our offices. Minor side-note: The (fixed) public IP-address of the office is listed as a trusted IP in Azure AD.
      Now it seems like a simple reboot of that machine has fixed the issue which I encountered on my laptop. Sounds kind of weird, but maybe somebody else can shed some light on this?! 😄

Resources