Live SDK Application - Unable to Complete Request?

Question

Hi,

I have my website integrated with Live SDK applications to allow customers to login to their MSN, Hotmail, Outlook, etc. email accounts and invite friends to my website by reading the contacts. This used to work properly but now it's not working anymore.

When I use the App ID / Client ID from the old Application Registration Portal (https://apps.dev.microsoft.com) I get the following message when I try to login using my Microsoft account.

invalid_request: The provided value for the input parameter 'redirect_uri' is not valid. The expected value is a URI which matches a redirect URI registered for this client application.

I see from the Application Registration Portal that I can now use Azure to manage my App Registrations, so I basically setup the same app under Azure with the following criteria.

• Authentication: Selected Web and setup the same Redirect URI I was using previously when this was working.
• API Permissions: I added "Microsoft Graph" with email, Contacts.Read, openid, profile, and User.Read.

And when I try to login to my Microsoft account using my Azure app Client ID / App ID I get the following message.

unauthorized_client: The client does not exist or is not enabled for consumers. If you are the application developer, configure a new application through the App Registrations in the Azure Portal at https://go.microsoft.com/fwlink/?linkid=2083908.

Should I try making this work using Azure instead of Application Registration Portal credentials? If so, why is it saying "unauthorized_client" when I try to login?

Thank you!

Answer 1

Hello, please follow the steps detailed in Register an application and ensure the following:

1. Supported account types is set to Accounts in any organizational directory and personal Microsoft accounts or Personal Microsoft accounts.
2. Use the V2 (not v1) endpoints.

Please let me know if you need more help. If the answer was helpful to you, please accept it and, optionally, provide feedback so that other members in the community can benefit from it.

Answer 2

@Alfredo Revilla (MSFT) Thank you for your reply!

Yes, I have it set to "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)" and followed the instructions to register an application but still have the same issue.

How do I know which Enpoints I'm using? I clicked on the link you sent me but I can't seem to find the "Endpoints" menu that it says is in the top left menu.

When I go under "Authentication" I see the following "Select the tokens you would like to be issued by the authorization endpoint" with options for "ID tokens (used for implicit and hybrid flows)" and "Access tokens (used for implicit flows)"; do I have to check ON any of these?

Ty.

Answer 3

I see now. Ok use these:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize
https://login.microsoftonline.com/common/oauth2/v2.0/token

For detailed documentation read this and this.

Please let me know if you need more help. If the answer was helpful to you, please accept it and, optionally, provide feedback so that other members in the community can benefit from it.