NPS Extension for Azure MFA - Reason:The JSON text being parsed is malformed
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 65%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMF%3C/text%3E%3C/svg%3E)
Mustafa Farhat
0
Reputation points
Hello,
I'm attempting to integrate NPS with Entra ID for two-factor authentication. Everything appears to be in order on the NPS server when I run the NPS_Health_Check script. However, when I attempt to connect through VPN, I encounter the following error:
"NPS Extension for Azure MFA: CID: 17785da8-6640-4d95-ba1d-800b4aa9d42f: Exception in Authentication Ext for User mufaac@****:: ErrorCode:: ESTS_TOKEN_ERROR Msg:: Unable to get Azure AD access token. [Reason: The JSON text being parsed is malformed.] [Code: 3399876615] Enter ERROR_CODE @ https://go.microsoft.com/fwlink/?linkid=846827 for detailed troubleshooting steps."
I've checked the provided link in the error message but couldn't find the same error code. I've also attempted to connect using Cisco AnyConnect and Microsoft RRAS, but the same error message persists.
Has anyone encountered a similar issue?
Thanks for any suggestions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator2023-12-30T01:46:27.6633333+00:00 Hello @Mustafa Farhat , the error code is detailed in the documentation. Have you followed the instructions?
-
Mustafa Farhat 0 Reputation points
2024-01-03T14:15:52.08+00:00 Hello Alfredo,
Thanks for your response.
Yes, I have followed the suggested troubleshooting steps outlined in Troubleshooting the MFA NPS extension guide, and all checks indicate that everything is functioning correctly. The certificate is valid, and successful authentication has been confirmed using the NPS_health_check script, with all tests passing.However when sending an authentication request from the VPN, I still encounter the error.
ErrorCode:: ESTS_TOKEN_ERROR Msg:: Unable to get Azure AD access token. [Reason:The JSON text being parsed is malformed.][Code:3399876615]
-
Mustafa Farhat 0 Reputation points
2024-01-03T14:19:02.5233333+00:00 @Alfredo Revilla - Upwork Top Talent | IAM SWE SWA Thanks for your response,
Yes, I have followed the suggested troubleshooting steps outlined in the Troubleshooting the MFA NPS extension, and all checks indicate that everything is functioning correctly. The certificate is valid, and successful authentication has been confirmed using the NPS_health_check script, with all tests passing.However when sending an authentication request from the VPN, I still encounter the error.
Sign in to comment
Sign in to answer