When you try to use the Microsoft Azure Active Directory Sync tool Configuration Wizard, you may receive the following error message:
DirSync: Your credentials could not be authenticated. Retype your credentials and try again.
Additionally, the following error message is recorded in the event log:
Your credentials could not be authenticated. Retype your credentials and try again. GetAuthState() failed with -2147186688 state. HResult:0 (0x80048800).
This issue may occur if the Microsoft Online Services Sign-in Assistant couldn't obtain the token from Azure Active Directory (Azure AD). Typically, the assistant can't obtain the token because of an issue with proxy settings.
To resolve this issue, check the proxy settings for Internet Explorer and for WinHTTP on the computer that's running the Directory Sync tool.
To check the proxy settings for Internet Explorer, follow these steps:
- Start Internet Explorer, click Tools, and then click Internet Options.
- Click the Connections tab, and then click LAN Settings.
- In the Local Area Network (LAN) Settings window, verify the proxy settings.
To check the proxy settings for WinHTTP, follow these steps:
- Import the Internet Explorer proxy settings to WinHTTP. To do this, take one of the following actions, depending on the version of Windows that you're running:
- On a Windows XP-based computer, type the following command at a command prompt, and then press Enter:
- On Windows Vista-based computer or on a Windows 7-based computer, type the following command at a command prompt, and then press Enter:
NetSH WinHTTP import Proxy ie
- Check that the WinHTTP proxy settings are correct. To do this, type the following command at a command prompt, and then press Enter:
netsh winhttp show proxy
If these steps don't resolve the issue, see the following Microsoft Knowledge Base article to troubleshoot another possible cause of the issue:
"An unknown error occurred with the Microsoft Online Services Sign-in Assistant" error when you run the Azure Active Directory Sync Tool Configuration Wizard
For more information about how to set the WinHTTP proxy settings, go to the following Microsoft Developer Network (MSDN) website:
Still need help? Go to the Office 365 Community
website or the Azure Active Directory Forums