OAuth 2.0 and Azure Active Directory - error AADSTS90009

Ahamed, Rahim 6 Reputation points
2022-11-04T21:02:36.077+00:00

I am trying to use the guide here:

https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-core

to login a user and request an access token to a custom Azure app service. After login is prompted and I login with my own account and try to request the access token using acquireTokenSilent, I get the AADSTS90009 error. The error mentions an application is requesting a token for itself and that this scenario is supported only if resource is specified using the GUID based App Identifier.

But when I try this same process with an admin account logged in, I can request a token successfully without this error. I'm assuming there is some sort of access or permission that this admin account has. Does anyone have an idea what permission I have to set?

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,640 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,473 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marten Theunissen 246 Reputation points
    2022-11-05T04:39:32.023+00:00
    1 person found this answer helpful.
    0 comments No comments