-
Title
MFA Authentication is being forced on the admin account used in ‘Configure Connections.' -
Description
When attempting to run a task within On Demand Migration (ODM) the following error will be returned if MFA is being forced on the admin account(s) used in ‘Configure Connections’.
AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access
-
Cause
Either MFA is set directly on the admin account(s) within the Office 365 portal or is being applied through a Conditional Policy. -
Resolution
ODM does not support MFA being applied to the admin accounts whose credentials are entered in ‘Configure Connections’ for automatic target OneDrive provisioning or Public Folder migration.
Check the source and target admin accounts to verify MFA is not applied either directly on the account itself or being assigned through a Conditional Access policy.
If the source and target Office 365 migration admin accounts have Multi-Factor Authentication disabled, then that indicates one or both of those accounts are not excluded from some Office 365 Conditional access policies that assign/enable MFA.
The account used in the 'Configure Connections' needs to be excluded, on both tenants, from these conditional access policies.Once MFA is fully disabled from the admin account(s), verify that a login from a web browser does not challenge for MFA and then try running a task within ODM.