Questions tagged [microsoft-identity-platform]
302 questions
26
votes
2 answers
What's the difference between the Microsoft identity platform and ASP.NET Core Identity?
What's the difference between the Microsoft identity platform and ASP.NET Core Identity?
The former is mentioned in the latter's documentation, but it's not clear to me the difference between the two.

Rikai no hōhō
- 737
- 1
- 7
- 13
20
votes
5 answers
IDW10201: Neither scope or roles claim was found in the bearer token
I have a ASP.NET Core 3.1 project like this sample: Sign-in a user with the Microsoft Identity Platform in a WPF Desktop application and call an ASP.NET Core Web API.
I'm using Identity web version 1.0 and Azure AD, single-tenant application.
I've…

1iveowl
- 1,622
- 1
- 18
- 31
10
votes
2 answers
CompactToken validation failed 80049228
Some users are getting this error back when trying to sign in using Microsoft Sign In in order to access mail via MS Graph. I've had both corporate users and personal (Hotmail.com) users both showing this error number but it works fine for most…

mike nelson
- 21,218
- 14
- 66
- 75
8
votes
3 answers
How use AddMicrosoftIdentityWebApiAuthentication without appsettings section?
I am implementing an Azure Active Directory in a .NET 5 API.
I currently have this API perfectly running on .NET Core 2.2.
This is the old working code:
services.AddAuthentication(AzureADDefaults.BearerAuthenticationScheme)
…

J Flex
- 312
- 1
- 3
- 11
8
votes
4 answers
How do I connect to Exchange Online using OAuth 2.0 in MailKit?
I have a web application that sends e-mails to users via Exchange Online (Office365) using MailKit and Basic Authentication. Our company is MS partner and therefor is obligated to turn off Basic Authentication for our services by the end of february…

Alex
- 193
- 1
- 4
- 11
8
votes
2 answers
MS Identity Azure app registered but sends unauthorized_client in implicit flow
I have registered an app in Azure for Microsoft Identity platform. I configured it to allow MS Accounts (e.g. outlook.com) and have basically done everything in a few of the quickstarts online here and here (except for "add credentials to your web…

Brinkle
- 83
- 1
- 1
- 4
6
votes
0 answers
Is it possible to close the log-in window of Azure AD B2C after redirecting to an electron using the system browser?
Current Situation
We built an Electron application that uses Web APIs guarded by Azure AD B2C.
The authentication process happens as follows:
User wants to log in
Electron prepares the initial OIDC request (return type code with oidc scope…

WalternativE
- 493
- 4
- 15
5
votes
4 answers
MsalUiRequiredException when calling Microsoft Graph SDK from NET Core web app
We have a NET Core 3.1 web application where users are authenticated in Azure AD with the Microsoft.Identity.Web package. We are calling the Microsoft Graph SDK on behalf of the signed in users as described here.
After logging in to the application…

Heisenberg
- 143
- 2
- 11
5
votes
1 answer
How to Add JwtBearer along with AddMicrosoftIdentityWebAppAuthentication
I am not sure I completely understood the changes for Microsoft.Identity.Web but I was following an article (given by Microsoft here) Where it described how to change in startup
services.AddAuthentication(AzureADDefaults.AuthenticationScheme)
…

Brijesh Shah
- 573
- 6
- 18
5
votes
2 answers
How to explicitly pass the "AzureAd" details to AddMicrosoftIdentityWebApi method for token validation
I am using Microsoft.Identity.Web library to validate the token in my .Net Core Web API.
public void ConfigureServices(IServiceCollection services)
{
------------
services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
…

samir jamadar
- 111
- 1
- 1
- 7
4
votes
1 answer
Azure AD returns non JWT Tokens when exchanging the OAuth2 code for an access token
I have an Azure AD App on my tenant that is configured to accept multiple tenants AND personal accounts.
I follow the procedure to retrieve an AccessToken as explained here:…

Cristiano Ghersi
- 1,944
- 1
- 20
- 46
4
votes
0 answers
Microsoft /oauth2/v2.0/authorize 'amr_values' request parameter is not supported. (MFA)
I'm trying to authenticate against the Microsoft https://login.microsoftonline.com/oauth2/v2.0/authorize endpoint with enforcing MFA. Following the documentation this is done by adding the &amr_values=ngcmfa request parameter to the authorization…

guffi
- 83
- 4
4
votes
1 answer
Microsoft Identity platform Configure dependencies never finish
I tried to add Microsoft Identity platform to a MVC project in Visual Studio 2019, on Connected Services page, I clicked on Configure next to Microsoft identity platform, then followed the steps:
chose my Azure tenant (b2c)(I am a admin)
chose /…

ManLam
- 51
- 2
4
votes
0 answers
How to do integration tests with AzureAD, if 2FA is enabled
I am trying to set up integration tests in a project, where the application is secured by AzureAd (Microsoft.Identity.Web) and 2FA. Usually the user would log in to the application using a SPA, and would be greeted by the login popup or redirect.…

Marco
- 22,856
- 9
- 75
- 124
4
votes
1 answer
Rare AADSTS7000215 error from Microsoft (Invalid client secret is provided)
Sometimes on trying to obtain token on:
login.microsoftonline.com/common/oauth2/v2.0/token
I receive the error:
AADSTS7000215: Invalid client secret is provided
I am sure that client_secret is correct and not expired. Most of the requests with the…

Mykola Shved
- 41
- 1
- 5