No user other than Entra Domain user able to sign in using REACT MSAL library on VSO scopes

Mustafa Jamal 66 Reputation points
2024-09-16T21:17:41.69+00:00

Hi, I am using an Application defined in Entra ID, which is valid for multi-Tenants and Microsoft accounts. Whenever I try to use scopes related to VSO I am not be able to use Microsoft Account ID or Live ID BUT when I remove ADO/VSO related scopes from the call I am able to use Live ID. Although I am able to use Tenant accounts. Here are the scopes:

User's image

When I try to use Live ID when VSO related scopes are added I get following error:

User's image

Here is the configuration:

User's image

User's image

I am using REACT MSAL library for this:

 

  "@azure/msal-browser": "^3.22.0",

   "@azure/msal-react": "^2.0.22",

 

Currently I am just using VSO related scopes and users from another tenant able to login and use my application, access token mechanism also working fine.

So, here question is why MS account/Live ID users are not be able to use VSO.* scope? although in ADO we are able to login using Live ID. Waiting for response.

Please let me know if further details are needed. 

Thanks,
Mustafa


Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,779 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Akhilesh 9,595 Reputation points Microsoft Vendor
    2024-09-25T20:22:06.26+00:00

    Hi @Mustafa Jamal

    Thank you for reaching Microsoft Q&A Forum!

    In the Microsoft identity platform, certain scopes and permissions are designed to be used only with organizational accounts due to the nature of the data and operations they control. VSO scopes typically fall into this category because they are intended for use within organizational contexts.

    Based on the information you provided, it seems that the issue is related to the scopes you are using in your application (VSO). Scopes are likely restricted to work or school accounts (Entra ID accounts) the error message you received indicates that personal Microsoft accounts (Live IDs) are not supported for the scopes you are using.

    Hope this helps. Do let us know if you any further queries by responding in the comments section.

    Thanks,

    Akhilesh.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.