25,112 questions
Firebase Authentication and Azure AD
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 14.000000000000002%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGH%3C/text%3E%3C/svg%3E)
Guillaume Hivert
1
Reputation point
Hi ! I have an error with Firebase Authentication and Azure AD. I need to have my users connected to my app with Microsoft Sign In so I configured everything in Azure and Firebase [following this guide][1]. But when I tried to sign customer with company account (i.e. not outlook.com or live.com, but rather accounts like example.com or customdomain.com), I got a « the requested action is invalid ». What’s weird is that is perfectly functional for every Microsoft account (I double checked). Is there anything to do to make it working? [1]: https://firebase.google.com/docs/auth/web/microsoft-oauth
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 2%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
soumi-MSFT 11,831 Reputation points Microsoft Employee Moderator2020-11-09T09:00:20.81+00:00 Hello @Guillaume Hivert , thank you for reaching out. I did go through the doc you shared from firebase and it looks like Firebase wants us to configure an app registration in Azure AD that would work with both Organizational and Microsoft Personal Accounts.
But as you mentioned that when you use the outlook or live accounts (Microsoft Personal Accounts) it works fine but when you use the Organizational Accounts it fails with the error "The requested action is invalid". It would be interesting to know which option you selected while creating the app registration in Azure AD for Supported Account Types. In case you have chosen "Personal Microsoft Accounts only" then this behaviour is expected.
To help you further, it would be great to know the complete error message that AAD throws, which would look something like AADSTS[errorcode]: description of the error. CorrelationID and timestamp.
-
soumi-MSFT 11,831 Reputation points Microsoft Employee Moderator
2020-11-09T09:00:46.34+00:00 Do share the following details so that we can help you better.
-
Guillaume Hivert 1 Reputation point
2020-11-09T10:21:30.857+00:00 Hi, and thanks for the answer. Some details, for the accounts type:
The problem is that it’s working for all my accounts, my outlook.com accounts as well as custom domains (I tried yesterday). It only send the error message when my customer tries to connect, so I don’t have the full error message. Is there any place in the Azure console where I can see what happened? Could it be some setting on my customer part that prevent them to log in?
-
soumi-MSFT 11,831 Reputation points Microsoft Employee Moderator
2020-11-09T11:42:09.813+00:00 Hello @Guillaume Hivert , thank you for sharing the details. I see that this is a multitenant app and I believe your customer is using this same multi-tenant app that you have registered in your tenant.
If so, you can find the errors on either customer's tenant under the signing logs for that user or you would have to capture the error message when the user on the customers' end tries to login and AAD throws the error on that login page as the login fails.
If you do see the error with an AADSTS{error_code} along with the correlationID and timestamp, make sure you click the three horizontal dots on the bottom of the screen and that would give you a detailed error message that would contain the correlationID, timestamp, and the error code thrown by AAD.
-
James Hamil 27,221 Reputation points Microsoft Employee Moderator2020-11-26T00:31:32.397+00:00 Hi, do you still require assistance? If not, please mark the answer as verified.
Thank you,
James
Sign in to comment
Sign in to answer