Entra IDEntra IDKnown error
AADSTS50076
Conditional Access wants MFA
Entra ID / Conditional Access
What the error looks like
- Error code
- WHO — identity
- WHAT — action
- WHERE — scope
- Policy
- Correlation / trace
AADSTS50076CODE: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013WHO'.
Trace ID: 77777777-8888-4999-8aaa-bbbbbbbbbbbbTRACE
Correlation ID: 88888888-9999-4aaa-8bbb-ccccccccccccTRACEWhat you told me
“My script can't log in.”
you · just now
Let's read it.
RTFE · seen
What it actually says
Conditional Access requires MFA for this user. A non-interactive script can't satisfy MFA with a user account.
Azure outage? No. Security policy doing its job.
The fix
- 01Don't run automation as a user.
- 02Use a service principal, a managed identity, or workload identity federation instead.
Read it faster next time
If your script needs a human to tap a phone, it isn't automation.