← cd ~/errors
// entra id sign-in error · mfa and registration
AADSTS50079
UserStrongAuthEnrollmentRequired
What it means
The user must register security info because of an admin configuration change.
How to fix it
Guide the user through registration, or issue a Temporary Access Pass.
How to investigate
- Open the sign-in log entry and check the Authentication details tab to see which methods were offered and which step failed.
- Check the user's registered methods under their Authentication methods blade.
- Check which Conditional Access policy or authentication strength asked for MFA.
- Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.
Guides on this site
- Temporary Access Pass: onboarding users without a password
- Microsoft is retiring its own SMS and voice MFA. Here's your plan.
Tools that help
Error names and meanings follow Microsoft's error code reference. The fixes are this site's guidance.