The service principal for resource '{identifier}' is disabled. This indicate that a subscription within the tenant has lapsed, or that the administrator for this tenant has disabled the application, preventing tokens from being issued for it.

Question

The service principal for resource '{identifier}' is disabled. This indicate that a subscription within the tenant has lapsed, or that the administrator for this tenant has disabled the application, preventing tokens from being issued for it.

AdministratorZG 5

Hello since yesterday all our Users can't login into outlook desktop.

All users have the license microsoft exchange online P1.

Logging into outlook web is no problem and it works.

When we look into the login-logs we get this error:
The service principal for resource '{identifier}' is disabled. This indicate that a subscription within the tenant has lapsed, or that the administrator for this tenant has disabled the application, preventing tokens from being issued for it.

We already tried alot of things like this: https://learn.microsoft.com/en-us/answers/questions/1728686/the-service-principal-for-resource-((identifier)) but that didn't help sadly.

image (5)

AdministratorZG 5 Reputation points

2025-05-09T09:11:16.2766667+00:00

Error from Login-Logs:
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2025-05-12T08:17:21.9966667+00:00

Hi @AdministratorZG
Just checking in to see if the below response helped to resolve your issue. If it did, please click "Accept Answer" and mark "Yes" for "Was this answer helpful?". If you have any more questions, feel free to ask!
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2025-05-13T08:15:49.39+00:00

Hi @AdministratorZG
Just checking in to see if the below response helped to resolve your issue. If it did, please click "Accept Answer" and mark "Yes" for "Was this answer helpful?". If you have any more questions, feel free to ask!

1 answer

Your answer

AdministratorZG 5 Reputation points

2025-05-09T09:11:16.2766667+00:00

Error from Login-Logs:
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2025-05-12T08:17:21.9966667+00:00

Hi @AdministratorZG
Just checking in to see if the below response helped to resolve your issue. If it did, please click "Accept Answer" and mark "Yes" for "Was this answer helpful?". If you have any more questions, feel free to ask!
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2025-05-13T08:15:49.39+00:00

Hi @AdministratorZG
Just checking in to see if the below response helped to resolve your issue. If it did, please click "Accept Answer" and mark "Yes" for "Was this answer helpful?". If you have any more questions, feel free to ask!

Answer 1

Vasil Michev 119.7K MVP Volunteer Moderator

This seems to be an ongoing issue currently, the way to resolve it is to re-enable the corresponding service principal. In PowerShell, you can do this via:

Update-MgServicePrincipalByAppId -AppId 40775b29-2688-46b6-a3b5-b256bd04df9f -AccountEnabled:$true

If you are not familiar with PowerShell, open the Entra portal > Enterprise applications > remove the filters > search for "40775b29-2688-46b6-a3b5-b256bd04df9f" (or the corresponding "Microsoft Information Protection API" display name) > click the entry > click Properties > make sure Enabled for users to sign-in? is set to Yes.

Andy Hyde (OrganisingChaos) 0 Reputation points

2025-05-11T16:11:25.4633333+00:00

Thanks for posting this and the answer. I had the same issue starting yesterday and this resolved it.
Andrey Savelev 0 Reputation points

2025-05-12T06:48:38.2066667+00:00

This have resolved my issue for the whole organization, thank you!
Elena Newton 0 Reputation points

2025-05-12T17:35:10.5033333+00:00

I also had this issue and this answer solved it. However, the Microsoft Information Protection API continues to disable itself(?) each day and I must re-enable it for our users to log into outlook.

Initiated by (actor)

Type: Application

Display Name: Microsoft Online Services

App ID

Service principal ID

Service principal name
Grant Klaaysen 0 Reputation points

2025-05-13T06:27:44.8+00:00

Thanks for the help. This is exactly what happen to me also on the 10th of May and your answer fixed it.

Share via

The service principal for resource '{identifier}' is disabled. This indicate that a subscription within the tenant has lapsed, or that the administrator for this tenant has disabled the application, preventing tokens from being issued for it.

1 answer

Your answer