Microsoft Teams是一个统一的通信和协作平台，它结合了持久的工作场所聊天、视频会议、文件存储和应用程序集成。如果您在从安装了Active Directory 联合身份验证服务^{(Active Directory Federation Services)}( AD FS )的公司网络连接时尝试登录Microsoft Teams^{(Microsoft Teams)} ，并且遇到“现代身份验证失败”^{(Modern authentication failed”)}错误消息，那么您可能会对这篇文章感兴趣。在这篇文章中，我们将确定潜在原因，并提供您可以尝试帮助解决此问题的可能解决方案。

现代身份验证失败，状态^(Status)码 4c7 – Microsoft Teams

当身份验证失败时，您将收到如下所述的错误消息：

Modern authentication failed here, but you’ll still be able to sign in. Your status code is 4c7.

如果您检查日志，您可能会看到类似于以下内容的信息：

DateTime< 7124> — info — SSO: SSO requires credential. Status: caa10001. Attempting windows auth.
DateTime< 7124> — info — SSO requires credential. Status: caa10001. Attempting windows auth. diag:1
DateTime<7124> — info — SSO: (Non domain joined) No user present. Status: 3399548929
DateTime<7124> — error — SSO: ssoerr – (status) Unable to get errCode. Err:Error: ADAL error: 0xCAA10001SSO: ssoerr – (status) Unable to get errorDesc. Err:Error: ADAL error: 0xCAA10001

要解决现代身份验证失败 - 状态代码 4c7^{(Modern authentication failed – Status code 4c7)}错误消息，您必须使用具有Active Directory本地副本的计算机上的AD FS Microsoft 管理控制台^{(AD FS Microsoft Management Console)}( MMC ) 管理单元来启用^(MMC)表单身份验证^{(Forms Authentication)}。为此，请按照下列步骤操作：

1. 在导航窗格中，浏览至Authentication Policies。
2. 在详细信息窗格中的 操作 下，选择^(Actions )编辑全局主要身份验证^{(Edit Global Primary Authentication)}。
3. 在Intranet 选项卡上，选择 Forms Authentication。
4. 选择确定^(OK) （或 应用^(Apply)）。

根据Microsoft的说法，出现此错误是因为Microsoft Teams需要表单身份验证^{(Forms Authentication)}。部署AD FS时，默认情况下不会为 Intranet 启用表单身份验证。^{(Forms Authentication)}

基于表单的身份验证是Web和基于 Internet 的在线联网计算机系统上下文中的一个艺术术语。通常，它指的是向用户呈现可编辑的“表单”以填写和提交以登录某些系统或服务的概念。

表单身份验证的优点是用户不必成为基于域的网络的成员即可访问您的应用程序。因此，Web 应用程序的数量在其 Web 应用程序中使用身份验证的形式。

ASP.NET中有三种类型的身份验证，即：

1. Windows 身份验证
2. 表单认证
3. 护照认证

如果Windows 集成身份验证^{(Windows Integrated Authentication)}失败，系统会提示您使用表单身份验证^{(Forms Authentication)}登录。

Modern authentication failed, Status code 4c7 - Microsoft Teams error

Microsoft Teams is a unified communication and collaboration platform that combines persistent workplace chat, video meetings, file storage, and application integration. If when you try sign in to Microsoft Teams when you connect from a corporate network in which Active Directory Federation Services (AD FS) is installed and you encounter the “Modern authentication failed” error message, then this post might interest you. In this post, we will identify the potential cause and as well provide the possible solution that you can try to help resolve this issue.

Modern authentication failed, Status code 4c7 – Microsoft Teams

When the authentication fails, you’ll receive the error message as described below:

Modern authentication failed here, but you’ll still be able to sign in. Your status code is 4c7.

And if you check the logs, you may see information similar to the following:

DateTime< 7124> — info — SSO: SSO requires credential. Status: caa10001. Attempting windows auth.
DateTime< 7124> — info — SSO requires credential. Status: caa10001. Attempting windows auth. diag:1
DateTime<7124> — info — SSO: (Non domain joined) No user present. Status: 3399548929
DateTime<7124> — error — SSO: ssoerr – (status) Unable to get errCode. Err:Error: ADAL error: 0xCAA10001SSO: ssoerr – (status) Unable to get errorDesc. Err:Error: ADAL error: 0xCAA10001

To resolve the Modern authentication failed – Status code 4c7 error message, you will have to enable Forms Authentication by using the AD FS Microsoft Management Console (MMC) snap-in on the computer that has the local copy of Active Directory. To do this, follow these steps:

1. In the navigation pane, browse to Authentication Policies.
2. Under Actions in the details pane, select Edit Global Primary Authentication.
3. On the Intranet tab, select Forms Authentication.
4. Select OK (or Apply).

According to Microsoft, this error occurs because Microsoft Teams requires Forms Authentication. When you deploy AD FS, Forms Authentication is not enabled for the intranet by default.

Form-based authentication is a term of art in the context of Web and Internet-based online networked computer systems. In general, it refers to the notion of a user being presented with an editable “form” to fill in and submit in order to log into some system or service.

The advantage of form authentication is that users do not have to be a member of a domain-based network to have access to your application. So the number of web applications uses the form of authentication in their web application.

There are three types of authentication in ASP.NET viz:

1. Windows authentication
2. Forms authentication
3. Passport Authentication

If Windows Integrated Authentication fails, you are prompted to sign in by using Forms Authentication.

Related posts

• 如何添加Zoom给Microsoft Teams

• 如何在Linux and macOS上安装Microsoft Teams

• 如何在Microsoft Teams上赞美Microsoft Teams的工作

• 你错过了，要求你的管理员启用Microsoft Teams

• Turn Off Read Receipts在Microsoft Teams为团队成员

• 如何在Windows 11上更改Microsoft Teams中的Theme

• 如何设置，Schedule and Join A Microsoft Teams meeting

• 从输出开关Microsoft Teams status的Office为可用

• 如何在Microsoft Teams中使用个人功能

• 如何在会议中使用Microsoft Teams至share content中的Share Tray

• Change User Roles，Permissions and Capabilities在Microsoft Teams中

• Microsoft Teams管理员禁用Video sharing

• 如何在Microsoft Teams中更改Team Picture

• 该文件已被锁定的错误上Microsoft Teams

• 您的IMs and calls将前往Microsoft Teams - Business Skype

• 如何安装应用程序，并把它添加在Microsoft Teams标签

• 如何将Google Calendar连接到Slack，Zoom and Microsoft Teams

• 如何在Microsoft Teams中删除Member Role并删除Member

• 如何在Microsoft Teams中创建Poll？

• 如何在Windows 11/10上修复Microsoft Teams错误code 500