Hello Redman2020,
Typical IT response.
The error code is very specific:
AADSTS7000112: Application ‘906be9aa-2843-47e6-a01d-ab9361ca7009’ (Aqua Mail) is disabled.
This means Duo approved you successfully, but Microsoft then blocked the login because the Aqua Mail application is disabled in your organization’s Microsoft Entra/Azure AD tenant.
This is not a password or phone issue, and not something you can fix inside Aqua Mail.
Please ask your Microsoft 365 admin to check:
Microsoft Entra admin center > Enterprise applications > Aqua Mail
They need to find the app with this Application ID:
906be9aa-2843-47e6-a01d-ab9361ca7009
Then make sure it is enabled for users to sign in, and that your user is allowed to use it. They may also need to grant/admin-consent the required mail permissions.
The key message for IT is:
Microsoft login fails after MFA with AADSTS7000112 because the Aqua Mail enterprise application is disabled in the tenant.
Once they enable it, you should be able to add the account normally in the current Aqua Mail version.