cant log in azure portal by my microsoft account

Question

cant log in azure portal by my microsoft account

alaa amin ahmed 45

I cant log in to the azure portal. I always encounter this error. My account is owner role in tenant .

Request Id: 01d5c7e9-5e99-46ed-8866-1fb80ea53200

Correlation Id: 72f7e2e4-c90b-4bc5-939d-0478a301c26a

Timestamp: 2025-03-19T20:04:22Z

Message: AADSTS90036: An unexpected, non-retryable error stemming from the directory service has occurred.

cert

Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-22T00:59:40.44+00:00

Hello alaa amin ahmed,

Thank you for reaching Microsoft Q&A.

As per description, we understand that when you try to login to azure portal, it fails with error AADSTS90036 adding certificate validation failed.

This can happen when you are trying to authenticate to Azure Active Directory (Azure AD) using Certificate-Based Authentication (CBA) and something goes wrong with the certificate validation process.

If your organization has firewalls or proxies with TLS inspection, acknowledge that you disabled TLS inspection of the certauth endpoint capable of matching any name under [*.]certauth.login.microsoftonline.com, customized according to the specific proxy in use.

Please let us know if you are able to login when you click on "other ways to sign in" as shown in the shared screenshot and also let us know if you have made any changes recently
alaa amin ahmed 45 Reputation points

2025-03-22T11:06:08.8866667+00:00

Hi Venkata I'm trying to log in from my laptop after disabling TLS and I keep trying to log in and failing every time
alaa amin ahmed 45 Reputation points

2025-03-22T14:48:15.5933333+00:00

i have Try using a different browser

different device and different Region also

I've done all this before for no reason
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-24T18:25:55.7833333+00:00

Hello alaa amin ahmed,

May I know the reason why you have disabled TLS 1.2 on your laptop.

I suggest you enable TLS 1.2 on your device and try to authenticate.

You can run the PowerShell script shared at the below link in admin mode on your laptop to enable TLS 1.2

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-tls-enforcement#powershell-script-to-enable-tls-12

Also please let us know if you have issues only on a single device or multiple devices

Thank you
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-25T17:38:55.07+00:00

Hello alaa amin ahmed,

We haven’t heard from you on the last response and was just checking back to see if you are able to enable TLS 1.2 on your machine?
alaa amin ahmed 45 Reputation points

2025-03-26T09:48:46.4966667+00:00

Hello Venkata

The tls tunnel has been enabled

I still can't log in .
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-27T01:00:30.6766667+00:00

Hello alaa amin ahmed,

The error showing as "Certificate validation failed."

I wanted to confirm with you that the certificate is valid and created the certificate by using the PowerShell script here?

https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-certificate-based-authentication#add

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-certificate-based-authentication-technical-deep-dive

And please confirm if you disable TLS inspection on the certauth endpoint to make sure the client certificate request succeeds as part of the TLS handshake.

In addition, can you confirm if the certificate is expired?

We do have a troubleshooting guide for facing CBA issues. https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/certificate-based-authenticate-issue
alaa amin ahmed 45 Reputation points

2025-03-27T12:19:50.9833333+00:00

hi Venkata Jagadeep

I have performed all of the steps without any response.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-28T18:59:00.0766667+00:00

Hello alaa amin ahmed,

We will connect offline for further troubleshooting on CBA.

Accepted answer

2 additional answers

Your answer

Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-22T00:59:40.44+00:00

Hello alaa amin ahmed,

Thank you for reaching Microsoft Q&A.

As per description, we understand that when you try to login to azure portal, it fails with error AADSTS90036 adding certificate validation failed.

This can happen when you are trying to authenticate to Azure Active Directory (Azure AD) using Certificate-Based Authentication (CBA) and something goes wrong with the certificate validation process.

If your organization has firewalls or proxies with TLS inspection, acknowledge that you disabled TLS inspection of the certauth endpoint capable of matching any name under [*.]certauth.login.microsoftonline.com, customized according to the specific proxy in use.

Please let us know if you are able to login when you click on "other ways to sign in" as shown in the shared screenshot and also let us know if you have made any changes recently
alaa amin ahmed 45 Reputation points

2025-03-22T11:06:08.8866667+00:00

Hi Venkata I'm trying to log in from my laptop after disabling TLS and I keep trying to log in and failing every time
alaa amin ahmed 45 Reputation points

2025-03-22T14:48:15.5933333+00:00

i have Try using a different browser

different device and different Region also

I've done all this before for no reason
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-24T18:25:55.7833333+00:00

Hello alaa amin ahmed,

May I know the reason why you have disabled TLS 1.2 on your laptop.

I suggest you enable TLS 1.2 on your device and try to authenticate.

You can run the PowerShell script shared at the below link in admin mode on your laptop to enable TLS 1.2

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-tls-enforcement#powershell-script-to-enable-tls-12

Also please let us know if you have issues only on a single device or multiple devices

Thank you
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-25T17:38:55.07+00:00

Hello alaa amin ahmed,

We haven’t heard from you on the last response and was just checking back to see if you are able to enable TLS 1.2 on your machine?
alaa amin ahmed 45 Reputation points

2025-03-26T09:48:46.4966667+00:00

Hello Venkata

The tls tunnel has been enabled

I still can't log in .
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-27T01:00:30.6766667+00:00

Hello alaa amin ahmed,

The error showing as "Certificate validation failed."

I wanted to confirm with you that the certificate is valid and created the certificate by using the PowerShell script here?

https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-certificate-based-authentication#add

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-certificate-based-authentication-technical-deep-dive

And please confirm if you disable TLS inspection on the certauth endpoint to make sure the client certificate request succeeds as part of the TLS handshake.

In addition, can you confirm if the certificate is expired?

We do have a troubleshooting guide for facing CBA issues. https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/certificate-based-authenticate-issue
alaa amin ahmed 45 Reputation points

2025-03-27T12:19:50.9833333+00:00

hi Venkata Jagadeep

I have performed all of the steps without any response.
Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator

2025-03-28T18:59:00.0766667+00:00

Hello alaa amin ahmed,

We will connect offline for further troubleshooting on CBA.

Answer 1

Techhelp Volunteer 230

you will have to contact Microsoft support team by phone support https://support.microsoft.com/en-gb/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

Answer 2

Techhelp Volunteer 230

I will try to help you to troubleshoot your issue.

if you can check result by performing below steps:

2. Clear Browser Cache and Cookies

Sometimes, cached data can cause login issues. Clear your browser's cache and cookies, then try logging in again.

3. Use Incognito/Private Mode

Try logging in using an incognito or private browsing window to rule out any browser extensions or cached data causing the issue.

4 Try a Different Browser or Device

Sometimes, browser-specific issues can cause login problems. Try using a different browser or device to see if the issue persists.

If issue persists, you will have to contact Microsoft support team or Azure support team by phone support https://support.microsoft.com/en-gb/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

Techhelp Volunteer 230 Reputation points

2025-03-22T14:50:43.0266667+00:00

Then you have to contact phone support team of Microsoft for further help. They may reset your account. You can share your so other users can get right guidance on your case url.

Answer 3

alaa amin ahmed 45

I just got permission to log in and reactivate the options.

Thank you for your support.

Share via

cant log in azure portal by my microsoft account

hi Venkata Jagadeep

2 additional answers

2. Clear Browser Cache and Cookies

3. Use Incognito/Private Mode

4 Try a Different Browser or Device

Your answer