Getting Exception while accessing Microsoft Teams from console app : "WS-Trust endpoint not found in metadata document. "

Question

Getting Exception while accessing Microsoft Teams from console app : "WS-Trust endpoint not found in metadata document. "

Mihir Purohit 1

Hello All,

I am trying to use Microsoft Graph API to access Microsoft Teams channel from my simple desktop console application developed in c# .net.

I have registered my application in single tenant (only my organization) and trying to access MS Teams (specific channel) but exception is thrown saying ""WS-Trust endpoint not found in metadata document. "

Article referred for development - https://learn.microsoft.com/en-us/graph/api/channel-get-filesfolder?view=graph-rest-1.0&tabs=http

I am searching where I have gone wrong..whether in application registration, permission....anything else.

Kindly help.

Thank you in advance.

Sayali-MSFT 6,021 Reputation points Microsoft External Staff Moderator

2022-07-14T06:39:19.577+00:00

@MihirPurohit-6751- We are looking into this I will get back to you soon.
Sayali-MSFT 6,021 Reputation points Microsoft External Staff Moderator

2022-07-14T12:25:28.507+00:00

@MihirPurohit-6751- Please ensure that you are using your global tenant admin account, which is your .onmicrosoft.com account. This error usually occurs if you are using the wrong credentials.

Your Client ID will match your application ID, as these are synonymous.

Mihir Purohit 1

@Sayali-MSFT

Thank you for comments. I am using Microsoft trial account of 30 days and using my .onmicrosoft.com account to run my application.
Below is the source code which can be helpful for you to investigate.

   static void Main(string[] args)  
    {  
       AccessMS_Teams_Channel().Wait();  
    }  
    private static async Task AccessMS_Teams_Channel()  
    {  
        DriveItem drvObj = await GetDriveItem();  
    }  
    private static async Task<DriveItem> GetDriveItem()  
    {  
        // please see next comment for definition of this method  
    }

Mihir Purohit 1 Reputation point

2022-07-15T14:01:19.01+00:00

var scopes = new[] { "Files.Read.All" };

// Multi-tenant apps can use "common",
// single-tenant apps must use the tenant ID from the Azure portal
var tenantId = "tenant id taken from my account";

// Value from app registration
var clientId = "taken from my application registration information";

var pca = PublicClientApplicationBuilder.Create(clientId).WithTenantId(tenantId).Build();

// DelegateAuthenticationProvider is a simple auth provider implementation
// that allows you to define an async function to retrieve a token
// Alternatively, you can create a class that implements IAuthenticationProvider
// for more complex scenarios

var authProvider = new DelegateAuthenticationProvider(async (request) => {
// Use Microsoft.Identity.Client to retrieve token

var result = await pca.AcquireTokenByIntegratedWindowsAuth(scopes).ExecuteAsync();
request.Headers.Authorization = new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", result.AccessToken);
});

var graphClient = new GraphServiceClient(authProvider);

DriveItem driveItem = await graphClient.Teams["{team id extracted from MS Teams application --> get link to team
option}"]
.Channels["{specific channel id extracted from MS Teams application --> get link to channel}"]
.FilesFolder
.Request()
.GetAsync();
return driveItem;

Mihir Purohit 1

var scopes = new[] { "Files.Read.All" };

// Multi-tenant apps can use "common",
// single-tenant apps must use the tenant ID from the Azure portal
var tenantId = "....tenant id from my azure portal account..";

// Value from app registration
var clientId = "...from my app registration...";

var pca = PublicClientApplicationBuilder.Create(clientId) .WithTenantId(tenantId).Build();

            // DelegateAuthenticationProvider is a simple auth provider implementation  
            // that allows you to define an async function to retrieve a token  
            // Alternatively, you can create a class that implements IAuthenticationProvider  
            // for more complex scenarios  
            var authProvider = new DelegateAuthenticationProvider(async (request) => {  
                // Use Microsoft.Identity.Client to retrieve token  
                var result = await pca.AcquireTokenByIntegratedWindowsAuth(scopes).ExecuteAsync();  

                request.Headers.Authorization =  
                    new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", result.AccessToken);  
            });  

            var graphClient = new GraphServiceClient(authProvider);  

            DriveItem driveItem = await graphClient.Teams["{...specific team...}"]  
                .Channels["{...specific channel}"]  
                .FilesFolder  
                .Request()  
                .GetAsync();

return driveItem;

Mihir Purohit 1 Reputation point

2022-07-18T06:10:39.167+00:00

@Sayali-MSFT

I am using "integrated windows type of authentication".

Ref. https://learn.microsoft.com/en-us/graph/sdks/choose-authentication-providers?tabs=CS
"desktop app that calls web API"

Kindly also advise anything, if incorrect.
Sayali-MSFT 6,021 Reputation points Microsoft External Staff Moderator

2022-07-19T11:31:01.24+00:00

@MihirPurohit-6751- Please have look into this thread-
https://stackoverflow.com/questions/70520657/msal4j-wstrust-endpoint-not-found-in-metadata-document
Hope it's helpful.
Sayali-MSFT 6,021 Reputation points Microsoft External Staff Moderator

2022-07-22T07:52:20.723+00:00

@MihirPurohit-6751- Could you please share the client-request-id and timestamp? Thanks
ChetanSharmamsft 1,036 Reputation points Microsoft External Staff Moderator

2022-07-29T06:42:03.757+00:00

@MihirPurohit-6751- Could you please share the client-request-id and timestamp, so that we can further investigate for your issue?