54
Views
3
Comments
Solved
Azure Ad SSO error AADSTS650056

Hello I have followed the tutorial for Idp React

installed idp react, I get to ad login page, but after login, i get this error, already looked on the forum and everything seems ok to me


AADSTS650056: Misconfigured application. This could be due to one of the following: the client has not listed any permissions for 'AAD Graph' in the requested permissions in the client's application registration. Or, the admin has not consented in the tenant. Or, check the application identifier in the request to ensure it matches the configured client application identifier. Or, check the certificate in the request to ensure it's valid. Please contact your admin to fix the configuration or consent on behalf of the tenant. Client app ID: 02caa017-10cf-4ee9-a54d-c8ef619eea4a.

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP
Solution

Hi Raffaele,

The error message lists 4 possible causes, did you check each of them to not be the case in your situation?

  1. the client has not listed any permissions for 'AAD Graph' in the requested permissions in the client's application registration. 
  2. Or, the admin has not consented in the tenant. 
  3. Or, check the application identifier in the request to ensure it matches the configured client application identifier. 
  4. Or, check the certificate in the request to ensure it's valid.  

Regards,

Daniel

UserImage.jpg
Raffaele Aldrigo

Can you explain me how to check (in details) all these points?

in particular 1 and 2

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

You need to check all of this in the Azure Portal, eitherway, this problem is not really an OutSystems problem, but a configuration problem in Microsoft Azure. Maybe on Microsoft forums you get faster and better response to your question.

https://blogs.aaddevsup.xyz/2018/05/finding-the-correct-permissions-for-a-microsoft-or-azure-active-directory-graph-call/


Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.