82,238 questions with Microsoft Security-related tags

Sort by: Updated
0 answers

Resource Health missing recommendations

in Resource Health, for my virtual machine PerimeterServer, I have a Recommendation titled, “SQL servers on machines should have vulnerability findings resolved”. Yesterday, when I clicked into it and went to the Findings tab, there were several…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-04-09T05:17:40.6733333+00:00
Laura Hodge 0 Reputation points
1 answer

URGENT: Global Admin Tenant Lockout - Active MFA Fatigue Attack - Case Escalation to Data Protection Team Required

Situation Summary: I am the sole Global Administrator for this tenant. My account is currently under a persistent MFA Fatigue / Brute Force attack originating from Russia (receiving 4–5 unauthorized "Approve" requests daily). My password has…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-04T12:26:26.9266667+00:00
John Brown 0 Reputation points
commented 2026-04-09T05:11:25.4666667+00:00
Cong Yen 0 Reputation points
7 answers

Global Admin Locked out

Hi, I’m locked out of our company's Microsoft 365 admin account because my phone with the Authenticator app was stolen, and so I no longer have access to it. I’m the only Global Administrator. MFA is required, and my only registered method was Microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-01-08T19:48:34.8266667+00:00
Nishtha Nagpal 50 Reputation points
commented 2026-04-09T05:08:32.9633333+00:00
Cong Yen 0 Reputation points
2 answers

Reset Personal Azure MFA

I am trying to log into my personal Azure subscription. After the initial authentication, it asks for a code from Authenticator. The Authenticator app shows 8‑digit codes, but Azure expects 6‑digit codes - Push notifications never arrive - “Use another…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-02-12T06:07:09.6866667+00:00
Lead Dev 10 Reputation points
edited a comment 2026-04-09T04:56:26.68+00:00
Mark Milkis 0 Reputation points
0 answers

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

I tried to invite only 30 external users through the Microsoft Teams web interface and got the error message "Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.", this is the…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-04-07T11:03:48.15+00:00
Carlos Bernardos Cano 0 Reputation points
commented 2026-04-09T04:52:12.9133333+00:00
ArtB 0 Reputation points
1 answer

Invitations are blocked for this directory due to suspicious activity

We have a new tenant that's being used as a lab. The invitations are created using PowerShell. The script was able to invite 10 users before being blocked. Opened a Microsoft support case but nothing has happened. Any other channel we can go through to…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-08T15:22:06.6133333+00:00
WarwickW-5009 0 Reputation points
commented 2026-04-09T04:48:33.9766667+00:00
ArtB 0 Reputation points
1 answer

Error code: interaction_required AADSTS5000225

When i attempt to log into portal.azure.com using I kept getting this error saying: interaction required AADSTS5000225: This tenant has been blocked due to inactivity. How do I resolve?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-04-09T03:01:49.51+00:00
Al-Basit Adegbayi 0 Reputation points
commented 2026-04-09T03:26:23.9333333+00:00
Rukmini 35,170 Reputation points Microsoft External Staff Moderator
1 answer

Access has been blocked by Conditional Access policies. The access policy does not allow token issuance.

Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. Installed Apps4.Pro for Migration and the Microsoft-managed CA policy "Block device code flow" is blocking my connection to our…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-08T16:31:07.9966667+00:00
Adriaan Kruger 0 Reputation points
answered 2026-04-09T03:13:03.3033333+00:00
Yutaka_K_JP 1,645 Reputation points
1 answer

Bug Report: prompt=consent blocks non-admin users even when tenant-wide admin consent has been granted

Summary When an OAuth 2.0 authorization request includes prompt=consent, non-admin users are blocked with the "Need admin approval" (AADSTS90094) screen, even when a Global Administrator has already granted tenant-wide admin consent for the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-02T01:40:41.56+00:00
Daisuke 0 Reputation points
answered 2026-04-09T02:31:17.3866667+00:00
Daisuke 0 Reputation points
2 answers

Unable to Configure sub Claim as Email in Azure AD Access Token (App Registration)

We are integrating Azure AD (Microsoft Entra ID) as an Identity Provider using OAuth 2.0 for Tableau Cloud. The integration is configured using an Azure AD App Registration, and we are using the access token issued by Azure AD for authentication with the…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-08T07:13:04.9433333+00:00
Sanket Mahajan 0 Reputation points
edited an answer 2026-04-09T02:03:10.68+00:00
Rukmini 35,170 Reputation points Microsoft External Staff Moderator
2 answers

I am getting AADSTS16000 error how to fix this issue not able to use any resources after login

Hi, Please find below error. I am able to login but not able to do anything because of below error. My login id is end with @outlook.com I used my Gmail id to create this account. Can some one please help me to resolve this error. { …

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-06T19:53:04.25+00:00
ArunKumar Rachakonda 0 Reputation points
answered 2026-04-09T01:17:20.5233333+00:00
ArunKumar Rachakonda 0 Reputation points
2 answers

How can I change the geolocation tied to our main office's IP address in Entra?

Entra is showing an incorrect geolocation for our company's main office IP address. The bulk of our sign-ins come from this location so I'm concerned that risk-detection is not working as well as it could because of the wrong geolocation.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-03-24T18:44:08.66+00:00
Nick Manning 0 Reputation points
answered 2026-04-09T01:14:45.4333333+00:00
Rukmini 35,170 Reputation points Microsoft External Staff Moderator
1 answer

Activate inactive account or delink the email id to create a new one

Hi Team, I was trying to create an Azure account for some personal work purposes and while signing up it shows that I already have an account with the given email id. While trying to login with the email id, it shows "account inactive"…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-04-04T13:08:53.29+00:00
Kiran 0 Reputation points
edited an answer 2026-04-09T01:13:06.4+00:00
Rukmini 35,170 Reputation points Microsoft External Staff Moderator
1 answer

not able to signin to azure account

Hi i am not able to signin to my azure account getting following message Sign-in failed Error code: interaction_required Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity. To learn more about tenant…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-04-08T04:08:02.58+00:00
Jiju Mohan 0 Reputation points
edited a comment 2026-04-09T01:12:57.0066667+00:00
Rukmini 35,170 Reputation points Microsoft External Staff Moderator
1 answer

Incorrect IP Geolocation - Pakistan IP Showing as Australia

Entra ID sign-in logs show IP PII as located in Australia. The actual location is Khyber Pakhtunkhwa, Pakistan. Third-party geolocation providers confirm the correct location (https://whatismyipaddress.com/ip/144.79.57.254). Screenshots attached for…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-03-31T18:41:09.7866667+00:00
Zubair Rahim 1 Reputation point
answered 2026-04-09T01:11:07.66+00:00
Rukmini 35,170 Reputation points Microsoft External Staff Moderator
2 answers

Entra External ID - Domain Hint for Custom OpenID Connect IDPs

I am expecting Entra External ID to support the query parameter domain_hint for HRD i.e. login straight to the Custom OpenID Connect IDP without having to select domain_hint=login.live.com works for MS…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-27T18:32:51.5466667+00:00
Josh Dinndorf 156 Reputation points
commented 2026-04-09T00:42:29.85+00:00
Eddie Liao 0 Reputation points
0 answers

eDiscovery Export Download Failing

When attempting to download files from an eDiscovery export the files fail to download. Seems to be a SSL issue? (index):1 Unsafe attempt to load URL https://gccm.proxyservice.ediscovery.gcc.svc.cloud.microsoft/ediscovery/api/proxy/exportaedblob(...)…

Microsoft Security | Microsoft Purview
asked 2026-04-08T23:09:08.4133333+00:00
Ross Mills 0 Reputation points Microsoft Employee
commented 2026-04-09T00:31:34.8666667+00:00
Manoj Kumar Boyini 11,440 Reputation points Microsoft External Staff Moderator
0 answers

Can't delete an ExternalGroup using the Graph API

I have an application that syncs groups from a 3rd party app into Graph API using an ExternalConnection and by recreating groups when memberships change - i.e. a delete followed by a create. Most groups work as expected. However some groups end up in an…

Microsoft Security | Microsoft Graph
asked 2026-04-08T01:43:01.0766667+00:00
Matt Bayliss 0 Reputation points
edited the question 2026-04-09T00:28:39.8366667+00:00
Matt Bayliss 0 Reputation points
1 answer

Graph API error on filter with Groups

Hello everyone, I am trying to get this URI (https://graph.microsoft.com/v1.0/groups?$filter=resourceProvisioningOptions/Any(x:x eq 'Team')) to work in Power Automate and I have tested it in the Graph Explorer and am getting the following error: Any…

Microsoft Security | Microsoft Graph
asked 2026-03-25T03:33:02.8466667+00:00
Hyde 1 Reputation point
commented 2026-04-09T00:22:08.59+00:00
Hyde 1 Reputation point
1 answer

SSO: Customer Entra ID as IdP for Entra External Id with self-sign-up user configuration

Here is our configuration: TenantA (Workforce tenant) - Customer Entra Id workforce serving as IdP for their users TenantB (External tenant) - Our Web facing application in latest Entra External ID (CIAM)    (This is NOT an old Azure B2C) We need…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-04-08T20:57:41.8066667+00:00
Ziggy Moscipan 0 Reputation points
commented 2026-04-08T23:31:22.5066667+00:00
mr jhon smite 0 Reputation points