This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 61%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
Hello all,
iam not able to add the application "Azure VPN Client" in Enterprise Application Entra ID.
When i click the button "Sign Up for Azure VPN Client", i got a redirect to the homescreen of Azure.
I also tried to add the App in Azure AD itself, but it is the same result.
I have global Admin priveleges.
I tried to close my session and reconnect. The App is not listed under enterprise applications.
Hope someone can help me. Thank you very much.
Greetings
Daniel
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@Daniel Böhm I have shared the contact details over the private message, please reach out to us, so that we can discuss offline.
@Givary-MSFT where did you shared it? I didn´t get any information.
@Givary-MSFT where do you shared this? I didn´t get any mail or information.
can we please solve the sequence of errors quickly? We need to complete a project for the customer.
Thank you!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 26%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Hi @Daniel Böhm
Thank you for posting this in Microsoft Q&A.
I understand that you are trying to add the Azure VPN Client Enterprise Application to the tenant, but when you click the 'Sign Up for Azure VPN Client' button, it gets redirected to the home screen of Azure and the application is not added to your tenant.
Can you try adding the Azure VPN Client enterprise application like below
1.Sign in to the Microsoft admin center as a user that is assigned the Global administrator role.
2.Next, grant admin consent for your organization. This allows the Azure VPN application to sign in and read user profiles. Copy and paste the URL that pertains to your deployment location in the address bar of your browser:
https://login.microsoftonline.com/common/oauth2/authorize?client_id=41b23e61-6c1e-4545-b367-cd054e0ed4b4&response_type=code&redirect_uri=https://portal.azure.com&nonce=1234&prompt=admin_consent
3.Select the account that has the Global administrator role if prompted.
4.On the Permissions requested page, select Accept.
5.Go to Microsoft Entra ID. In the left pane, click Enterprise applications. You'll see Azure VPN listed.
Hope this helps. Do let us know if you any further queries.
Thanks,
Navya.
If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Hi @Navya
first of all thank you for your help. The application is now listed in the "Enterprise Applications".
The problem now is, when the client start to connect to our network we get the following error:
""Error 3399614468 Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration."
So i tried to register the application in entra admin. The problem is now, that the application ID does not match with the application ID in the enterprise application.When I guess it correct, the application ID is made with the URL that you send us. I tried to change the URL to the application ID that is shown in Entra Admin App registration, but then i got this error:"AADSTS650052: The app is trying to access a service '###-6c1e-4545-b367-###'(Azure VPN) that your organization '###-0dcd-49e3-8a3c-###' lacks a service principal for. Contact your IT Admin to review the configuration of your service subscriptions or consent to the application in order to create the required service principal."Is it possible to change the application ID from ###-6c1e-4545-b367-### to ###-c7c2-4f8b-9d77-### or do we have another issue here?
Thank you very much.
Hi @Navya
first of all thank you for your help. The application is now listed in the "Enterprise Applications".
The problem now is, when the client start to connect to our network we get the following error:
""Error 3399614468 Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration."
So i tried to register the application in entra admin. The problem is now, that the application ID does not match with the application ID in the enterprise application.When I guess it correct, the application ID is made with the URL that you send us. I tried to change the URL to the application ID that is shown in Entra Admin App registration, but then i got this error:"AADSTS650052: The app is trying to access a service '###-6c1e-4545-b367-###'(Azure VPN) that your organization '###-0dcd-49e3-8a3c-###' lacks a service principal for. Contact your IT Admin to review the configuration of your service subscriptions or consent to the application in order to create the required service principal."Is it possible to change the application ID from ###-6c1e-4545-b367-### to ###-c7c2-4f8b-9d77-### or do we have another issue here?
Thank you very much.
Hi @Daniel Böhm
Thank you for following up on this!
The client application has requested access to a resource, but this request has failed because the client has not specified the resource. This issue typically occurs when the company's app is not registered with Microsoft Entra ID or does not have the correct permissions applied.
Could you please cross-check the following in your Point-to-Site configuration Tenant, Audience and Issuer
For your reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant
Is it possible to change the application ID
It's not possible to change the Application ID. The Application ID is an immutable ID that is generated once you register an application in Entra.
Hi @Daniel Böhm
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Hello @Daniel Böhm
Refer to similar question asked in Q and A forum for your solution.
If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Hello @SUNOJ KUMAR YELURU
We followed the Microsoft Guide. We have already googled the link you sent us.
Other Q and A can't fix this bug. In a thread it was described that Microsoft Support was able to fix this bug.
I don't believe that this bug can't be fixed for 2 years and that other customers have the same problem.
Please help us!