AADSTS50072

What it means

The user needs to register for MFA.

How to fix it

Expected during first sign-in. Make sure registration isn't blocked by a Conditional Access policy on security info registration.

How to investigate

1. Open the sign-in log entry and check the Authentication details tab to see which methods were offered and which step failed.
2. Check the user's registered methods under their Authentication methods blade.
3. Check which Conditional Access policy or authentication strength asked for MFA.
4. Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.

Guides on this site

• Temporary Access Pass: onboarding users without a password

Tools that help

• Sign-in log explainer
• Troubleshooting wizards
• Microsoft's error lookup for 50072 ↗