Microsoft Teams
A Microsoft customizable chat-based workspace.
10,159 questions
Azure AD Client ID Mismatch in Teams App Developed with VS Teams Toolkit
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 55.00000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDO%3C/text%3E%3C/svg%3E)
Daniel O'Sullivan
30
Reputation points
Hello Community,
I've been working on a multi-tenant Microsoft Teams application using the Visual Studio Teams Toolkit. I've recently changed the CDN address of the app to point to a different storage container with a slightly different version of my Azure app, but I'm facing some issues with Azure AD authentication. The other version works when authentication runs though its single instance Azure AD App Registration and doesn't go through the CDN. To my understanding I should just be able to points the CDN origin to a different storage container and have that work.
What I'm trying to achieve:
I have a verified multitennant Azure AD application registration that points to an authenticated domain and URL. The URL points to my CDN and the CDN points to the storage container (rttab) where the teams app is held. This all works fine for the version of the app on the rttab storage container. I have another storage container called rtsingletab this was set up in another tenant and this version works fine as there is a separate azure ad app registration single tenant for this. I want to be able to have the CDN point at whatever storage container I want to use at the time so I can easily switch what the multitenant registration app storage container is pointing to. This will make it easy to show different aspects of my app to clients.
What I've Checked:
- The
aad.manifest.jsonandmanifest.jsonfiles in the VS Code project - Azure AD configurations in Azure Portal
- Reply URLs configured in Azure Portal for the Azure AD application
Question:
- How can I correct this client ID mismatch?
- Are there additional settings or files that I should be aware of in order to debug and solve this issue?
Any help would be greatly appreciated.
Thank you!
Microsoft Teams
Microsoft Teams Development
Microsoft Teams Development
Microsoft Teams: A Microsoft customizable chat-based workspace.Development: The process of researching, productizing, and refining new or existing technologies.
3,284 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,826 questions
{count} votes
-
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points2023-09-20T22:57:06.37+00:00 Hello @Daniel O'Sullivan , can you provide more detail or documentation being followed that explains the CDN to storage relationship or setup?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 24%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
JimmyYang-MSFT 53,141 Reputation points Microsoft Vendor2023-09-21T02:09:22.5766667+00:00 Teams tag is mainly focused on the general issue of Microsoft Teams troubleshooting. According to your description, your question is not in our support scope. So I will remove teams tag from your thread. Thanks for your understanding and patience!
-
Daniel O'Sullivan 30 Reputation points
2023-09-21T12:29:23.91+00:00 @Alfredo. I am trying to create a multitenant teams app. A necessary step in this process it to set up a CDN that sits between the verified domain address (also required for multi tenant apps) and the static website address of the storage container the teams app code is actually held on.
I can't find where exactly I was directed at using the CDN as opposed to having the domain address directly link to the storage container static website address. It may have been a forum post somewhere or part of the documentation I'm not sure.
Either way the CDN sitting between the verified domain address and the storage container static web address seems to work fine for the most part. When the user runs the teams app they are verified via the multi tenant azure ad app registration and the client ID of that multi tenant app registration is passed in the URL call to the auth-start.html file on the storage container and authenticates correctly allowing the user to use the app.
The issue arises when I point the CDN at another storage container. The exact same auth-start.html file is located on that storage container. Although for some reason it's passing the client ID of a different Azure AD App registration in not the client ID of the multitenant app registration. I'm not sure why this is as all the code values in the manifest is pointing at my multitenant app registration and it passes the correct clientID of the multitenant app registration when the CDN is pointing at the other static website storage container address.
-
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points
2023-10-14T02:16:12.7633333+00:00 Hello @Daniel O'Sullivan , aplogies for the delay in coming back. Please capture a network traffic fr both scenarios (storage 1 and storage 2) using Fiddler, export the session and send it to azcommunity@microsoft.com with Subject Attn: Alfredo Revilla. Also, it would be of great help if you can include some source code in order to determine what kind of teams application is this.
Sign in to comment
Sign in to answer