Microsoft Authenticator - Service Principal Error

Microsoft Authenticator - Service Principal Error

When attempting to use Microsoft Authenticator to sign into EGCC applications such as Canvas, the EGCC Student Portal, or the EGCC Mobile App on your iOS device, you may run into a Service Principal AADSTS900491 error that prevents you from successfully signing in.  This is often due to the Authenticator App being updated with an older authentication method already signed in.

To resolve this, you simply have to delete your saved sign-in information inside the Authenticator app and then setup your account again.  Here are the steps to follow to remove and re-add your EGCC account to the Microsoft Authenticator App on iOS.

Step 1: Open the Microsoft Authenticator App on your iPhone and tap on your EGCC account to show the account details view.  Tap on the 'gear' icon in the top right corner of the view.  This will reveal the Account Settings view.

Step 2: In the Account settings view, tap on the button that says 'Remove account'.

Step 3: When prompted, select 'All apps on this device'.  This will effectively remove your saved/cached EGCC account from Microsoft Authenticator.

Step 4: We now need to re-add our EGCC account.  Tap on the '+' button on the top right corner of the Authenticator app's main view.

Step 5: To begin adding a new account, select 'Work or school account' from the list.

Step 6: Tap on the 'Sign In' option when prompted.

Step 7: Enter your EGCC email address and tap 'Next'.

Step 8: Enter your EGCC password and tap 'Sign in'.

Step 9: Here is the tricky part.  It's going to try to use Authenticator to sign you in with multi-factor.  Since we no longer have our account saved in Authenticator on this device, we have to tap past the error message and then tap on the 'I can't use my Microsoft Authenticator right now' link on this view.

Step 10: When prompted, select an alternate verification method, such as a Text Message to your phone number on file.

Step 11: Enter the code that is sent via SMS to your device to verify your identity.  Tap the 'Verify' button to proceed.

Step 12: Once that is completed successfully, you will now have re-added your EGCC account to Authenticator.  Tap 'Finish'.

Once you have completed these steps, you should attempt to sign into the mobile app or website again and you should be able to successfully use Authenticator again to gain access using Multi-factor Authentication on your device.
    • Related Articles

    • Using the Microsoft Authenticator App for MFA

      For staff and faculty who prefer to use the Microsoft Authenticator app for multi-factor authentication instead of using standard SMS text messaging, please follow the step-by-step instructions on the attached PDF document.  Please note that this is ...
    • Canvas Student Mobile App - Uploading a Video to Studio

      To get the Canvas Student mobile app: For iPhone and iPad: Click Here For Android: Click Here Step 1: Locate and open the Canvas Student Mobile App from the Applications area of your device. Then click on the "Hamburger" menu icon in the top left ...
    • Downloading & Using the EGCC Mobile App for iPhone

      Eastern Gateway Community College provides students with the EGCC Mobile app that is compatible with iPhone or iPad devices running iOS 14 or later.  It supports watchOS 8.0 and later if using with an Apple Watch device. Students can download the ...
    • Downloading & Using the EGCC Mobile App for Android

      Eastern Gateway Community College provides students with the EGCC Mobile app that is compatible with Android devices running Android version 10 (Android Q) or later. Students can download the EGCC Mobile app from the Google Play Store. Once you have ...
    • Using the Canvas Mobile App (iPhone, iPad, Android)

      You can install the App for the LMS System - Instructure Canvas.  Here are the links to the Apps for iOS and Android. iPhone / iPad - Instructure Canvas Student on the App Store Android - Instructure Canvas on Google Play Information & instructions ...