OAuth 2.0 and Azure Active Directory - error AADSTS90009

Ahamed, Rahim 1 Reputation point
2022-11-04T21:02:36.077+00:00

I am trying to use the guide here:

https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-core

to login a user and request an access token to a custom Azure app service. After login is prompted and I login with my own account and try to request the access token using acquireTokenSilent, I get the AADSTS90009 error. The error mentions an application is requesting a token for itself and that this scenario is supported only if resource is specified using the GUID based App Identifier.

But when I try this same process with an admin account logged in, I can request a token successfully without this error. I'm assuming there is some sort of access or permission that this admin account has. Does anyone have an idea what permission I have to set?

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,743 questions
Azure Active Directory External Identities
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marten Theunissen 236 Reputation points
    2022-11-05T04:39:32.023+00:00
    0 comments No comments