OAuth 2.0 authorization code flow returns server_error

Question

Hi,

I currently have an OAuth 2.0 application using the authorization code flow. It's working correctly for most users but for some reason it fails for a single one.

Using the following settings:

Authorize URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize

Token URL: https://login.microsoftonline.com/common/oauth2/v2.0/token

Scopes: openid, offline_access, https://ads.microsoft.com/msads.manage

For the user that this fails, I get just the server_error as the error with no indication of the underlying issue. Some examples:

`

Answer 1

Hi,

I am facing this problem. I understand that, my Autodesk account can not pass through the Microsoft Authenticator. I changed the session approval order to solve it but didn't work.

Any help?..

https://signin.autodesk.com/idmgr/callback#error_description=%28reference%23+DPCPSEVQ%29+The+OAuth+auth+server+has+returned+an+error+for+the+auth+request+-+jit_failure+-+Unable+to+create+the+user.&state=cWxEMHJDdEJHUlZjT0wzQ0dGYkFZdUFKRENCcm9Ebk4ub00yanVoVHdTUndHQ1Vhc1VkWGswQWxDcHhoZWNiMW04bnUwUXFjMzNtSS5vcGVuaWQlMjBkZXZpY2Vfc3NvLnVzZV9hbHRlcm5hdGl2ZV9wcm9kdWN0X3BhdGg%3D&error=access_denied

Answer 2

Hi @Tiago Surjus Kaneta

Thank you for posting this in Microsoft Q&A.

I understand that your user receiving a "server_error" response when attempting to authenticate a specific user with your OAuth 2.0 application.it is possible that there is an issue with the user's account or permissions.

Here are some steps you can take to troubleshoot the issue:

1. Make sure that the user has the necessary permissions to access the resources that your application is requesting. In this case, it looks like your application is requesting the "https://ads.microsoft.com/msads.manage" scope, so make sure that the user has the necessary permissions.
2. Verify that the user's account is active and not blocked or disabled. If the user's account is blocked or disabled, they will not be able to authenticate with your application.
3. Verify that the user is entering the correct username and password when attempting to authenticate with your application. If the user's credentials are incorrect, they will not be able to authenticate.

If the issue persists, kindly send the Fiddler trace of your user request/response to azcommunity[at]microsoft[dot]com with the subject line "ATTN: Navya," and include the following details in the body of the email: a link to this thread/post.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya

Answer 3

To troubleshoot the server_error for a specific user in your OAuth 2.0 application, try the following:

1. Check User Account: Ensure the user's account is active and has necessary permissions.
2. Review Logs: Check Azure AD and application logs for detailed error messages.
3. Consent and Permissions:
   • Ensure the user has granted consent for the required scopes.
     • Verify if admin consent is needed for the requested scopes.
     1. Token Request: Confirm that the token request parameters are correct and consistent for all users.
4. Error Details: If possible, capture and analyze any additional error details returned by the server.