Getting "unauthorized_client" when trying to login using Microsoft account

user_2155584 0
Viewed 2256

In my IS4's Startup.cs:

services.AddAuthentication()
        .AddMicrosoftAccount(o =>
        {
            o.SignInScheme = IdentityServer4.IdentityServerConstants.ExternalCookieAuthenticationScheme;
            o.ClientId = "clientId";
            o.ClientSecret = "clientSecret";
        });

I have defined the scope:

  • openid
  • profile

And I get the error after I tried to login:

unauthorized_client: The client does not exist or is not enabled for consumers. If you are the application developer, configure a new application through the App Registrations in the Azure Portal at https://go.microsoft.com/fwlink/?linkid=2083908.

It's a web app. So what am I doing wrong here:

I assume the client ID is this: enter image description here

And my client secret is this: enter image description here

I have also set up the redirect URI:

enter image description here

azure-active-directory azure
1 Answers

The error means the Supported account types are not set for the personal account(Microsoft account in your case).

To solve the issue, navigate to the Manifest of your App registration, set the two properties accessTokenAcceptedVersion and signInAudience like below.

"accessTokenAcceptedVersion": 2,
"signInAudience": "AzureADandPersonalMicrosoftAccount"

When you save the setting, make sure your app meets the requirement of the validation, otherwise there will be some errors.

user_94556590
Related