AzureADPrt showing NO

Question

AzureADPrt showing NO

adil waaziz 20

Hello,

I'm configuring Hybrid Joined for a Windows 11 fleet, the machines are Hybrid Joined but when I run a dsregcmd /status I get the AzureADPrt field in No and the error code 0x800484c0

My domain is federated with Omnissa's Vmware Identity

Do you have any idea where this problem might be coming from?

User's image

Accepted answer

0 additional answers

Your answer

Answer 1

Kancharla Saiteja 5,890 Microsoft External Staff Moderator

Hi @adil waaziz,

Based on your query, here is my understanding: I see that you are unable to get PRT for your device and receives the code: 0x800484c0.

Based on the error, we can confirm that you are trying to login to the device using a federated user which throws this error when the IDP is unable to provide token for the device login. This attempt fails when wstrusttokenresponse fails from the third party IDPs. We have seen many scenarios of the same which occurs due to third party federated IDP's endpoints which are not open or enabled. I would request you to check with your IDP team and check all the ports and endpoints from the IDP are open and available to provide token for device login. There is no issue with Entra here to retrieve PRT for your device.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly "upvote it". If you have extra questions about this answer, please click "Comment".

adil waaziz 20 Reputation points

2025-06-03T22:28:46.6833333+00:00

Hello,

Thanks you for your reponse, my Idp is vmware identity and iwant to know how i can verify if he support wstrust protocol
Kancharla Saiteja 5,890 Reputation points Microsoft External Staff Moderator

2025-06-03T22:34:18.9133333+00:00

Hi @adil waaziz,

Please reach out to the federated identity team, for any endpoint verification or details of your federated identity (Omnissa), They will help you in finding the solution for the issue. The issue is not in the scope of Entra as the identity is dependent of third party.
Kancharla Saiteja 5,890 Reputation points Microsoft External Staff Moderator

2025-06-04T17:47:45.4966667+00:00

Hi @adil waaziz,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Kancharla Saiteja 5,890 Reputation points Microsoft External Staff Moderator

2025-06-05T17:49:58.39+00:00

Hi @adil waaziz,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Kancharla Saiteja 5,890 Reputation points Microsoft External Staff Moderator

2025-06-06T21:32:39.6766667+00:00

Hi @adil waaziz,

Following up to check if you would like to know any additional information on the issue. If you have any further queries which need to be addressed, kindly check your private message and respond accordingly.

Share via

AzureADPrt showing NO

0 additional answers

Your answer