Symptoms

Order fails with the following error:

The last error - "Service Creation Failed: Parallels Operations Automation error #error_code #0, extype_id #1, module_id #Common, Internal error: APSC: AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '00000002-0000-0000-c000-000000000000'.
Trace ID: 78221dd9-74b9-418c-a70e-274933ba2000
Correlation ID: c86fe78a-509e-4c2c-8a4a-02a4a7ad01ee
Timestamp: 2018-11-09 14:12:55Z.. Service Creation Failed: Parallels Operations Automation error #error_code #0, extype_id #1, module_id #Common, Internal error: APSC: AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in multi-factor authentication to access '00000002-0000-0000-c000-000000000000'.
Trace ID: 78221dd9-74b9-418c-a70e-274933ba2000
Correlation ID: c86fe78a-509e-4c2c-8a4a-02a4a7ad01ee
Timestamp: 2018-11-09 14:12:55Z..".

Also this error can appears in CCPv1 > Office 365 tab

Cause

The request requires the user to do multi-factor authentication and then send this new token back to Web API 1 and complete the on-behalf-of flow. MFA was enabled by triggering a rule if some action (e.g. sudden location change) was treated as "risky activity". For an account there is a "moved to a new location" flag that can get set, automatically triggering the need for MFA, even if it was initially off.

Resolution

If you do face this, check the conditional access locations in Azure AD and check if your AAD admin can clear the flag. Disable MFA for the account or configure conditional access to give access to "Global Admin" role.

Please find additional info in the following articles:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-locations

https://docs.microsoft.com/en-us/azure/active-directory/develop/conditional-access-dev-guide

https://docs.microsoft.com/en-us/office365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide

Internal content

Link on internal Article