Error : Get-CsOnlinePowerShellAccessToken : AADSTS50076: Due to a configuration change made by your administrator,


Below error popup when trying to connect Skype for Business online connector session.




Get-CsOnlinePowerShellAccessToken : AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '39624784-6cbe-4a60-afbe-9f46d10fdb27'.
Trace ID: e35e09ef-5e7b-4390-b25a-5b47d7c71e00
Correlation ID: a4791461-7d62-478b-985c-fdbee03dfabf
Timestamp: 2020-03-30 04:43:58Z
At C:\Program Files\Common Files\Skype for Business
Online\Modules\SkypeOnlineConnector\SkypeOnlineConnectorStartup.psm1:214 char:28
+             $accessToken = Get-CsOnlinePowerShellAccessToken @params
+                            ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-CsOnlinePowerShellAccessToken], AdalClaimChallengeException
    + FullyQualifiedErrorId : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalClaimChallengeException,Microsoft.Rt
   c.Management.OnlineConnector.GetPowerShellAccessToken

You will get below error when you use Powe Shell script such as below to connect into Skype online connector.

Import-Module SkypeOnlineConnector


$userCredential = Get-Credential
$sfbSession = New-CsOnlineSession -Credential $userCredential -OverrideAdminDomain XYZ.onmicrosoft.com -Verbose
Import-PSSession $sfbSession




Error : Get-CsOnlinePowerShellAccessToken


Reason:


You are getting the above error because of Multi-Factor Authentication. When the MFA enabled for the account above command is not getting an option to authenticate with Multi-factor. It gives only username and password option to authenticate.

Resolution:


Option 1:

Remover MFA authentication option from the account.
I strongly not recommend removing MFA from the account. It is important to make login security strong.

Option 2:

Use below PS script to connect skype online sessions. Get-Credential option has been removed. This allows making MFA authentication for the online session.

Import-Module skypeOnlineConnector
$Session = New-CsOnlineSession -OverrideAdminDomain XYZ.onmicrosoft.com -Verbose
Import-PSSession $Session -AllowClobber -Verbose



Comments

Popular posts from this blog

SAP and Microsoft want the collaboration application to drive the jump to the cloud

Microsoft Mesh is the platform that Microsoft is creating for a virtual office in augmented reality

New Windows 365. The operating system to the cloud