AADSTS1002016: You are using TLS version 1.0, 1.1 and/or 3DES cipher which are deprecated to improve the security posture of Azure AD.

Manoj Pant 135 Reputation points
2023-03-29T12:27:55.1233333+00:00

We are using MSAL.net in the VB.net desktop application to authenticate using Azure AD.

but currently facing issue "AADSTS1002016: You are using TLS version 1.0, 1.1 and/or 3DES cipher which are deprecated to improve the security posture of Azure AD."

Steps: 1 Register the application over Azure AD and redirect url

User's image

Step 2: Call AcquireTokenInteractive() from the VB.net desktop application:


        Try
            Dim ClientId = "800648b7-d74c-45a9-9895-9da2dd67109b"
            Dim Tenant = "3c150d40-f8a6-4418-b062-26ad5b6608dd"
            
Dim publicClientApp As IPublicClientApplication = PublicClientApplicationBuilder.Create(ClientId).WithRedirectUri("https://login.microsoftonline.com/common/oauth2/nativeclient").WithAuthority(AzureCloudInstance.AzurePublic, Tenant).Build()

            Dim scopes As String() = New String() {"user.read"}

Dim authResult = Await publicClientApp.AcquireTokenInteractive(scopes).ExecuteAsync()
            Dim s = authResult.AccessToken



        Catch ex As Exception
        End Try

Step 3: Popup screens open to adding username and password but after that it throws the exception:

User's image

Do we are missing some steps over it? We just need to get the Token after login in to the code.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,557 questions
Office Development
Office Development
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Development: The process of researching, productizing, and refining new or existing technologies.
3,474 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 141.3K Reputation points MVP
    2023-03-29T12:33:36.01+00:00

    Have you enabled TLS 1.2 on the client or within that script that is connecting to Azure ?

    https://learn.microsoft.com/en-us/troubleshoot/azure/active-directory/enable-support-tls-environment?tabs=azure-monitor

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful