Error when authorizing Azure AD application

Question

One of our client's getting below error after authorizing our application. {"error":{"code":"InvalidAuthenticationToken","message":"Inbound policy evaluation empty. Unkown failure","innerError":{"date":"2024-02-20T05:23:39","request-id":"387abf84-e5ec-4793-8427-fd35a01e71a6","client-request-id":"387abf84-e5ec-4793-8427-fd35a01e71a6"}}} This error returned in the callback after user Accept the permissions. In customer's tenant sign-in logs, it was logged that invalid client secret is provided. But we are pretty sure we provide the correct secret and same application works fine with other customers. What could be the issue here? Is it related to any configuration on customer's tenant?

Answer 1

Hi, @Yasitha Pandithawatta Sorry about your client's experience. I think the issue has to do with the authentication process or a policy configured in your Microsoft Entra ID. Could you check that the client secret provided is correct and that the client is entering it correctly? If the client secret is correct, as you stated above, could you also check the application configuration in the Entra ID Portal and ensure that it matches the client ID and secret? A few other things you could check are: ensuring that the required permissions are configured properly in the Entra ID (Azure AD ) application; and granting the necessary consent. Also, check if policies are blocking consent. Feel free to let me know if the above helps!

Answer 2

I had this error suddenly happen twice today, in an application that has been running fine for over a year, and it resolved itself with no changes. My guess is that something went awry in the MS Graph API infrastructure that manifested itself in this error, because nothing in my environment changed to trigger it, and it resolved without any changes.

So if you see this with an application that has been working, it could be just a temporary issue in the Microsoft cloud somewhere that will resolve itself.