topic Re: Error: AADSTS50076 - AcquireTokenAsync fails with multi-factor auth in Developer

Error: AADSTS50076 - AcquireTokenAsync fails with multi-factor auth

Anonymous — Tue, 19 Jun 2018 18:31:30 GMT

Hi, is there any way for power bi embedded of acquiring token using a multi-factor auth pro user? Or would one have to tend to creating a new tenant for power bi or creating a non-MFA "service user"?

We're currently receiving below error

AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

Re: Error: AADSTS50076 - AcquireTokenAsync fails with multi-factor auth

Anonymous — Tue, 19 Jun 2018 19:59:23 GMT

I don't think MFA is supported. This is more of an Azure AD area which is a little outside of my area of expertise, but you can create a policy which enforces MFA amongh other things. In this case you'd want to choose not to add a policy in Azure AD so that MFA isn't required for this user.

Re: Error: AADSTS50076 - AcquireTokenAsync fails with multi-factor auth

v-jiascu-msft — Thu, 21 Jun 2018 02:38:44 GMT

Hi @Anonymous,

I guess your scenario is App owns data. I'm afraid the MFA isn't supported. It's obvious we can't ask our customers to finish the multi-factor auth for the sole account. The authentication should be quiet in the background.

Please also refer to Developer/Error-AADSTS50076-while-trying-to-login-on-App-owns-data-sample

Best Regards,

Dale

Re: Error: AADSTS50076 - AcquireTokenAsync fails with multi-factor auth

Anonymous — Thu, 21 Jun 2018 08:49:49 GMT

Hi @v-jiascu-msft, I agree that the authentication should happen quietly in the background. For MFA scenarios creating an app password (similar to app passwords for office365) for the registered app could do the job.

https://docs.microsoft.com/en-us/azure/multi-factor-authentication/end-user/multi-factor-authentication-end-user-app-passwords

We'll find a workaround as long as MFA scenarios are not supported.

Kind regards,

NAJ