MFA & Verification Issues

How to Fix Azure Directory Switching Error 500121 with Microsoft Authenticator

Nimra Malik Oct 15, 2026 868 views

Question details

The user is unable to switch Azure directories due to an authentication failure involving Microsoft Authenticator, resulting in error code 500121.

How to Fix Azure Directory Switching Error 500121

Product: Microsoft Azure / Microsoft Authenticator
Device & OS: not provided
Scenario: Attempting to switch directories in the Azure portal and completing the multi-factor authentication (MFA) prompt.
Observed behavior: The directory switch fails with error 500121, often accompanied by denied MFA approvals or invalid verification codes.

Before you start

Ensure you have your mobile device with the Microsoft Authenticator app accessible, and check the official Azure Status page to rule out any ongoing global service outages.

Solution 1Recommended

Verify Account Permissions and Authenticator Registration

Ensure your account has the correct permissions for the target directory and that Microsoft Authenticator is properly linked to your security profile.

Error 500121 typically indicates that authentication failed because the user's multi-factor authentication (MFA) request was denied or the configuration is invalid. Re-verifying your security info can often resolve the mismatch.

Sign in to Security Info

Navigate to your organization's 'My Sign-Ins' portal (mysignins.microsoft.com) and click on the 'Security info' tab in the left-hand menu.

Check Authenticator Status

Verify that Microsoft Authenticator is listed as an active sign-in method. If it is missing or outdated, delete the existing entry and click 'Add sign-in method' to re-register the app.

Confirm Target Directory Permissions

Ask an administrator of the target directory to verify that your guest or member account is active and has not been blocked from signing in.

Verify Account Permissions and Authenticator Registration

Multiple Accounts: If you have multiple accounts in the Authenticator app, ensure you are approving the prompt for the exact account attempting the directory switch.

Solution 2

Clear Browser Data or Use an Alternate Session

Rule out corrupted browser cache or stale session tokens that might be interfering with the directory switching process.

Solution 3

Contact Microsoft Support for Account Recovery

If you are completely locked out of the directory or are the sole administrator, you will need Microsoft Support to reset your MFA settings.

Free Microsoft Office alternative

Maintain Your Productivity Uninterrupted with WPS Office

While you are troubleshooting Microsoft Azure and Authenticator issues, keep your daily document workflow moving seamlessly. WPS Office is a powerful, lightweight, and completely free alternative to Microsoft Office that doesn't rely on complex cloud authentication to view or edit your local files.

1. Download and Install: Get the free WPS Office installer from the official website and complete the quick installation.
2. Open Your Files: Launch WPS Office and directly open your existing Microsoft Office documents without format loss.
3. Work Offline: Enjoy full editing capabilities locally on your device, avoiding online authentication hurdles.

Fully compatible with Microsoft Office formats, including .docx, .xlsx, and .pptx.Lightweight application that works seamlessly offline without constant cloud logins.All-in-one workspace featuring Word, Excel, PowerPoint, and PDF editing capabilities.Intuitive, familiar interface that requires zero learning curve for seamless migration.

microsoft office alternative - wps office

Frequently Asked Questions

What exactly does Azure Error 500121 mean?

Error 500121 means 'AuthenticationFailed'. It occurs when multi-factor authentication (MFA) is denied, times out, or when there is a configuration mismatch between the Azure tenant and the Microsoft Authenticator app.

Where can I find the Correlation ID for this error?

When the error message appears on your screen, look for a button or link labeled 'More details' or 'Troubleshooting details'. Expanding this section will reveal the Correlation ID and Request ID.

Can I bypass Microsoft Authenticator if it stops working?

You cannot bypass it if conditional access policies mandate MFA. However, if you have set up alternative authentication methods (like SMS or an alternate email), you can click 'Sign in another way' on the login screen.

Why does directory switching trigger MFA?

Different Azure directories (tenants) have their own independent security policies. The target directory you are switching to likely has a Conditional Access policy requiring guests or external users to perform MFA upon access.

Login & Account Issues