User gets error when logging in

  • Resolved helgeopedal

    (@helgeopedal)


    1 month ago

    Hi! We are using the plugin in a wordpress multisite and most users can log in with the one-click authentication. But some users get an error message:
    Message: AADSTS75011: Authentication method ‘MultiFactor, PasswordlessPhoneSignIn’ by which the user authenticated with the service doesn’t match requested authentication method ‘Password, ProtectedTransport’. Contact the WordPress application owner.
    Does anyone know if there is a solution for this? We believe it is either on the operating system or in the plugin itself. Any settings we can set?
    Thank you!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Contributor Anais Pantheor

    (@anaispantheor)

    1 month ago

    Hi @helgeopedal,

    This is a known Azure AD error when users authenticate with passwordless or MFA methods. The plugin requests password-based authentication by default, which conflicts with those methods.

    You can resolve it by adding this filter to your theme’s functions.php or a custom mu-plugin:

    add_filter( 'wp_saml_auth_internal_config', function( $config ) {
    $config['security']['requestedAuthnContext'] = false;
    return $config;
    } );

    This disables the authentication method restriction, letting Azure AD use whatever method the user signed in with.

    Let us know if that resolves it.

    Thread Starter helgeopedal

    (@helgeopedal)

    1 month ago

    Hi, thank you very much! We have implemented the code, and verified that it indeed solves the problem! Helge

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.