Powershell script for multi-factor authentication for Microsoft Graph API

Question

I am working on Microsoft Graph with powershell script.

I am using authorization grant flow to get the access token to retrieve the emails from a shared mailbox using my user account, whenever I provide my login credentials, its giving me below error related to the MFA.

Invoke-RestMethod : {"error":"invalid_grant","error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'

Is there any way to launch a MFA authentication window from powershell script?

Any help or example is appreciated.

Stephan · Accepted Answer · 2021-05-20 21:14:38Z

0

You say “you provide credentials”, do you mean you’re setting the username and password in powershell?

You have several ways, it would suggest to use the “device code flow”. Then the login part is done in the browser, where you have all those multi-factor things configured.

Someone made a great blog about it, https://blog.simonw.se/getting-an-access-token-for-azuread-using-powershell-and-device-login-flow/

answered May 20, 2021 at 21:14

Stephan

2,6601 gold badge20 silver badges39 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Ravindra Shukla Over a year ago

Yes, my powershell script launch a login window, where I enter my username and password and after that I am getting the above posted error related to MFA. I will try the "device code flow" as you suggested.

Collectives™ on Stack Overflow

Powershell script for multi-factor authentication for Microsoft Graph API

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related