Microsoft

interaction_required — Interaction required

User interaction is required (e.g., MFA/consent).

Riposte solution

Azure AD requires user interaction (like MFA or consent) and won't allow a silent token refresh. When Riposte encounters this, the refresh token can't be used silently. You must prompt the user to sign in again. Use /auth/sessions to generate a new auth session and have the user complete the login, possibly with MFA. This ensures the necessary interaction (consent/MFA) is handled.

Quick facts

Provider: Microsoft
Endpoint / surface: Azure AD OAuth 2.0
Status code: 400

Why it happens

[MFA required; Consent needed]

How to fix it

[Retry interactively; prompt user to complete challenge/consent]