How Do I Fix AADSTS700016:

Swapnil Nirhali 10

I am facing this issue while sign in with SAML 2.0 using Power Apps portal.

Application with identifier 'https://selfservice361wrg.powerappsportals.com/' was not found in the directory 'MSFT'. This can happen if the application has not been installed by the administrator of the tenant or consented to by

James Hamil 24,581 Reputation points Microsoft Employee

2023-03-01T21:32:44.23+00:00

Hi @Swapnil Nirhali , did my answer help you? If so can you please mark it as "Verified" so other users can reference it?

Thank you,

James

2 answers

Bart Korn 15 Reputation points

2024-09-11T06:07:40.2866667+00:00

As of 10-09-2024 we receive this error AADSTS700016 for EVERY tenant when trying to use connect-pnponline

The complete error message (after logging in) is:

AADSTS700016: Application with identifier '31359c7f-bd7e-475c-86db-fdb8c937548e' was not found in the directory 'Contoso'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.

Where 31359c7f-bd7e-475c-86db-fdb8c937548e is the application ID of the (already) registered 'PnP Management Shell' application

I can not find any working solution(s).
Please sign in to rate this answer.

2 people found this answer helpful.
Pieter Hattingh 5 Reputation points

2024-09-11T06:21:10.22+00:00

I have been receiving the same error as of 10-09-2024. The Application is still present under my Azure Tenant.

Bart Korn 15 Reputation points

2024-09-11T07:06:48.9933333+00:00

Hi Pieter
Do you have this Azure error for the PnP Management Shell as well or for another application?

Pieter Hattingh 5 Reputation points

2024-09-11T07:48:34.2133333+00:00

Error: AADSTS700016: Application with identifier '31359c7f-bd7e-475c-86db-fdb8c937548e' was not found in the directory

'---------------------. This can happen if the application has not been installed by the administrator of the ten

ant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant. Trac

e ID: a1d6262a-d444-4d8d-8686-8091c3c28500 Correlation ID: 5074ee06-70c7-484a-acd4-673738e344c3 Timestamp: 2024-09-11

06:18:23Z

Bart Korn 15 Reputation points

2024-09-11T07:53:50.4933333+00:00

Thanks
31359c7f-bd7e-475c-86db-fdb8c937548e is the application ID of the PnP Management Shell app
I looks like it occurs on all tenants
I really need PnP for daily use for support on M365 tenants
So question is where can we address this issue?

sigitas-grebliunas 10 Reputation points

2024-09-11T08:59:54.4166667+00:00

Same issue. Logging manually gives you this nice hint:

WARNING:

As of September 9th, 2024 the option to use the PnP Management Shell app registration for authentication is not available anymore. Refer to https://pnp.github.

io/powershell/articles/registerapplication.html on how to register your own application.

sigitas-grebliunas 10 Reputation points

2024-09-11T09:01:32.58+00:00

So app registration needed from now on

Bart Korn 15 Reputation points

2024-09-11T09:07:10.8233333+00:00

Thanks Sigitas!,
what do you mean with log locally (how)?

The github link does not work do you have the full url on https://github.com/pnp ?

sigitas-grebliunas 10 Reputation points

2024-09-11T09:22:49.58+00:00

Login manually - simply start Connect-PnpOnline from powershell and login to site you have access. Will get the hint above.

https://pnp.github.io/powershell/articles/registerapplication.html
Register Azure App (or use existing one). It will need sharepoint API permission AllSites.Read

Bart Korn 15 Reputation points

2024-09-11T09:41:18.27+00:00

I thought you meant logging not log in :)
I tried following on cdx demo tenant and works!
Github mentions Register-PnPEntraIDAppForInteractiveLogin, changed this with Register-PnPAzureADApp

Register new app:
Register-PnPAzureADApp -ApplicationName "PnP App" -Tenant M365x37801169.onmicrosoft.com -Interactive
after registration you need to give consent to the permissions given.
(Change ClientID en tenant(ID) to your own)

New login method parameters: Connect-PnPOnline -Url https://M365x37801169-admin.sharepoint.com -CertificatePath '.\PnP App.pfx' -ClientId 8f1bc1c0-2fa8-4ffa-90b1-e08d638c2bdd -Tenant fc93004f-fd09-4a27-a0ce-fee0a314526d

Bart Korn 15 Reputation points

2024-09-11T10:43:02.9033333+00:00

Hi posted the complete instruction to use the connect with clientId and certificate, but it got deleted automatically.

Erland Sommarskog 111.1K Reputation points MVP

2024-09-11T11:13:05.0633333+00:00

Hi posted the complete instruction to use the connect with clientId and certificate, but it got deleted automatically.

I have restored it.

Sam 0 Reputation points

2024-09-25T09:36:01.5866667+00:00

Hi Bart,

Where did you post the complete instruction to use the connect with clientId and certificate?

Pieter Hattingh 5 Reputation points

2024-09-25T10:38:51.6333333+00:00

Github mentions Register-PnPEntraIDAppForInteractiveLogin, changed this with Register-PnPAzureADApp1. Register new app: Register-PnPAzureADApp -ApplicationName "PnP App" -Tenant M365x37801169.onmicrosoft.com -Interactive after registration you need to give consent to the permissions given. (Change ClientID en tenant(ID) to your own)

New login method parameters: Connect-PnPOnline -Url https://M365x37801169-admin.sharepoint.com -CertificatePath '.\PnP App.pfx' -ClientId 8f1bc1c0-2fa8-4ffa-90b1-e08d638c2bdd -Tenant fc93004f-fd09-4a27-a0ce-fee0a314526d
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
James Hamil 24,581 Reputation points Microsoft Employee

2023-02-03T00:11:56.4+00:00
Hi @Swapnil Nirhali ,

AADSTS700016 is an error code that indicates that the application you are trying to sign in to is not registered in Azure AD. To fix this issue, you need to register the application in Azure AD.

Here are the steps to register an application in Azure AD:

Open the Azure portal and sign in as a global administrator or co-admin.

Select All services at the top of the navigation pane on the left side to open the Azure AD extension.

Type Azure Active Directory in the filter search box, and then select Azure Active Directory.

Select App registrations in the Azure AD navigation pane.

Select New registration to register a new application.

Enter a name for the application and select the supported account types.

Select Register to create the application.

I would also suggest looking at this thread's solution in case it applies to your case. Please let me know if you have any questions and I can help you further.

If this answer helped you please mark it as "Verified" so other users can reference it.

Thank you,

James
Please sign in to rate this answer.
Pieter Hattingh 5 Reputation points

2024-09-11T09:09:56.4766667+00:00

https://pnp.github.io/powershell/articles/registerapplication.html

Bart Korn 15 Reputation points

2024-09-11T09:14:24.93+00:00

Thanks I found it by searching (Googling) for the relative url
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How Do I Fix AADSTS700016:

2 answers

Your answer