Search Engine: Elastic

Article ID: 133902, created on Apr 4, 2019, last review on Apr 4, 2019

  • Applies to:
  • Operations Automation 7.4

Symptoms

Order fails with the following error:

The last error - "Service Creation Failed: Parallels Operations Automation error #error_code #0, extype_id #1, module_id #Common, Internal error: APSC: AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '00000002-0000-0000-c000-000000000000'.
Trace ID: 78221dd9-74b9-418c-a70e-274933ba2000
Correlation ID: c86fe78a-509e-4c2c-8a4a-02a4a7ad01ee
Timestamp: 2018-11-09 14:12:55Z.. Service Creation Failed: Parallels Operations Automation error #error_code #0, extype_id #1, module_id #Common, Internal error: APSC: AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '00000002-0000-0000-c000-000000000000'.
Trace ID: 78221dd9-74b9-418c-a70e-274933ba2000
Correlation ID: c86fe78a-509e-4c2c-8a4a-02a4a7ad01ee
Timestamp: 2018-11-09 14:12:55Z..".

Also this error can appears in CCPv1 > Office 365 tab

Cause

The request requires the user to do multi-factor authentication and then send this new token back to Web API 1 and complete the on-behalf-of flow. MFA was enabled by triggering a rule if some action (e.g. sudden location change) was treated as "risky activity". For an account there is a "moved to a new location" flag that can get set, automatically triggering the need for MFA, even if it was initially off.

Resolution

If you do face this, check the conditional access locations in Azure AD and check if your AAD admin can clear the flag. Disable MFA for the account or configure conditional access to give access to "Global Admin" role.

Please find additional info in the following articles:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-locations

https://docs.microsoft.com/en-us/azure/active-directory/develop/conditional-access-dev-guide

https://docs.microsoft.com/en-us/office365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide

5356b422f65bdad1c3e9edca5d74a1ae 8fc71f07abe5b233fea1ae0377cd5e3d 55fe109b4b4fe3fbb893f22dbb85a41a 1941880841f714e458ae4dc3d9f3062d

Email subscription for changes to this article
Save as PDF