← cd ~/errors
// entra id sign-in error · mfa and registration
AADSTS50158
External security challenge
What it means
The user was sent to an external challenge such as terms of use or third-party MFA.
How to fix it
Expected in the flow. On its own it doesn't mean the sign-in failed.
How to investigate
- Open the sign-in log entry and check the Authentication details tab to see which methods were offered and which step failed.
- Check the user's registered methods under their Authentication methods blade.
- Check which Conditional Access policy or authentication strength asked for MFA.
- Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.
Guides on this site
Tools that help
Error names and meanings follow Microsoft's error code reference. The fixes are this site's guidance.