Error AtlasError Documentation and Resolution
Back to search

Microsoft Entra ID

Microsoft Entra cross-tenant access failed because inbound MFA trust is not configured

The organization you're trying to reach needs to update their settings to let you sign in.

Microsoft Entra cross-tenant B2B direct connect access failed because inbound multifactor-authentication trust settings are not configured correctly between the organizations.

AADSTS90071authentication

Observed message

The organization you're trying to reach needs to update their settings to let you sign in.

Why it happens

  • Cross-tenant inbound MFA trust settings are not enabled for the external organization.
  • The B2B direct connect configuration does not trust the external tenant's MFA claims.
  • Cross-tenant access settings were left at defaults that do not permit the required trust path.

How to fix it

  1. Review cross-tenant access settings for the organizations involved.
  2. Enable the required inbound and trust settings for external MFA where appropriate.
  3. Retest the shared-channel or B2B access flow after the trust configuration is updated.

Official reference

Troubleshoot common issues with Microsoft Entra B2B collaboration

Related errors

AADSTS54005Microsoft Entra authorization code was already redeemedAADSTS7000215Microsoft Entra client secret is invalidAADSTS700016Microsoft Entra could not find the application in the directoryAADSTS50011Microsoft Entra redirect URI does not match the app registration

Explore more

authenticationBrowse more authentication errors
AADSTS90071 inbound MFA trust not configured in Entra | Error Atlas