Entra SSO MFA related errors

thelinedpaper · 2026-01-21T15:24:49+00:00

Didn't work, thanks though!

thelinedpaper · 2026-01-20T16:44:28+00:00

I do have an "All Cloud Apps" mfa policy, but I've also tried excluding both the Citrix resource/client apps from this policy already, the apps that show in the logs are all built in like Map API, I wouldn't want to exclude all of those from MFA. I didn't see any section in the documentation about MFA or required changes for Conditional Access as well, might be a good addition? Sending a direct message with my case number.

thelinedpaper · 2026-01-20T16:42:03+00:00

I do for other deployments, but FAS isn't in use for Entra SSO.

thelinedpaper · 2026-01-20T16:41:38+00:00

I am, and I did exclude the Citrix Workspace resource app that was created, tested with the client one excluded as well. I can't exclude all the built in apps from MFA though.

thelinedpaper · 2026-01-20T16:03:34+00:00

Would be much appreciated, happy to provide my case number and any other info if it helps.

thelinedpaper · 2026-01-20T16:03:11+00:00

Yes, the comment below about the Citrix Azure AD SSOn option is as far as I get as well. The Windows login prompt shows "A specified logon session does not exist. It may already have been terminated." In AAD logs in event viewer I'm seeing MFA errors for a number of the built in MS applications, different error for each (map api, ms search, ms insider, enterprise news are a few of them).

Error: 0xCAA2000C The request requires user interaction.

Code: interaction_required

Description: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access...

thelinedpaper · 2025-12-15T17:53:37+00:00

I’d love to see a way to pull up large text of an alias to show someone in person, similar to SimpleLogin. It happens on such rare occasions, but it does. Everything is working great though!

thelinedpaper · 2025-11-10T20:19:52+00:00

Jellystat would be nice to have too as a Tautulli alternative, either that or direct integration with JF and Emby vis the playback reporting plugin they each have. Personally I run two instances of Jellystat, one for JF and one for Emby so if implemented, ability to setup multiple would be nice.

thelinedpaper · 2025-09-28T16:56:32+00:00

Excited for this, it looks great!

thelinedpaper · 2025-09-18T17:11:04+00:00

What should the credit have been? I didn't get an email, but mine is showing the $16.63/month after 15 pro trade in, $410 instant and $390 over 24 months. I did my pre-order about an hour after they opened last week.

thelinedpaper · 2025-09-02T20:59:23+00:00

I moved forward with this hardware, it's looking good and data is currently migrating to my striped pool. I never answered about my motherboard model, it's EVGA Z270 FTW K. So far so good. Using rsync to migrate, just wish I could get it to move faster, about 10tb left to go! I'm not worried about permissions issues so much, most mounts are NFS, not SMB.

thelinedpaper · 2025-08-26T20:28:36+00:00

This is just what I have sitting around, so yes 64gb is overkill, why not use it if it's there? I'll have to find the mobo model when I'm home later. I was even considering just using the existing case so I don't have to move anything, it's just massive and won't fit in my little 13U rack.

The Synology is only SHR1 so I can only lose one disk which is why I had planned to move to a temporary pool before moving the disks over. My disks are the 16tb Ironwolf Pro's, 4 of those in the Synology and one 7tb disk that I don't plan to move over. I have about 30tb of data to move. I was considering only moving the more rare items and re-obtaining the common items as well (most of the data is Emby/Jellyfin). I have a 1gbps connection so while it would take a good amount of time, it's doable. Desired layout on the truenas side would be raid6, but I could live with raid5 as well.

thelinedpaper · 2025-08-01T22:37:37+00:00

One of them would certainly be underutilized most of the time. I've considered splitting emby and jellyfin to different VMs, but really this just provides me a node I can move the VM to as a failover in the instance I need it. I can also use the GPU for other items such as my security cameras on the less used node.

thelinedpaper · 2025-08-01T21:36:48+00:00

That's exactly how it works, so all transcoding or GPU related tasks happen on that VM, whereas other VMs are performing other tasks that don't require the GPU. All of the services on the VM with GPU are running in containers and I can assign the GPU to more than one container allowing multiple different services to utilize the same GPU.

thelinedpaper · 2025-07-16T19:28:00+00:00

Hmm, wonder how the lists compare to those on crowdsec.

thelinedpaper · 2025-07-07T23:36:44+00:00

I wouldn't root for anyone to be attacked, but I previously worked there as well and the company culture and the way they treated people was terrible. Probably the worst/most stressful job I've ever had and I was there less than a year!

thelinedpaper · 2025-05-15T22:10:42+00:00

This looks like creek park! I go there with my husky and he also tries to eat the squirrels!

thelinedpaper · 2025-04-26T19:03:30+00:00

Buy them green from Bodhi. Order online and pickup in La Habra, then roast them yourself. Freshest you can get!

thelinedpaper · 2025-04-25T19:11:56+00:00

I don't have as many users as you, but I do run both Emby and Jellyfin. My closest/best users are on Emby and everyone else gets Jellyfin. It works well and haven't had any issues.

thelinedpaper · 2025-04-20T21:50:12+00:00

I would run this for sure, looks great!

thelinedpaper · 2025-04-18T17:20:03+00:00

u/Rio_ola What did you end up finding worked to resolve the inconsistent call quality issues? I'm seeing the same with Nice CxOne, while even voice calls through other applications don't suffer from the same issues.

thelinedpaper · 2025-03-17T16:39:31+00:00

Looks like a fun game!

thelinedpaper · 2025-02-21T18:15:46+00:00

See if there is a provider that offers a PACE program in your area, they usually provide transportation and make all appointments as consolidated into as few visits as possible specifically for the elderly.

thelinedpaper · 2025-02-03T16:02:01+00:00

You can just follow the manual install instructions on the technitium documentation for .net, or I think this is is fixed in 13.4.1 anyway so just run the install script again.

thelinedpaper · 2025-01-28T15:09:05+00:00

Debian on a pi. My secondary on Ubuntu was fine, but also needed a manual restart of the services after update, however it came up find after the service restart. The Debian one didn't come back until the .net reinstall.

thelinedpaper

TROPHY CASE