Not able to access web api hosted in Azure enviornment

Question

Not able to access web api hosted in Azure enviornment

Agrawal C, Akash 41

Hi Team,
There is an api hosted in azure enviornment and i am trying to access the same. Although to access the same i need to pass the access token.
To get the access token i have added api permission in my application eso. Also from mobile i am passing scopes as well but its not working and i am getting error while loggin itself.

below is stacktrace. scope and client id is dummy to keep confidentiality.

com.microsoft.identity.client.AuthenticationResultAdapter:declinedScopeExceptionFromRes [2021-07-16 16:17:23 - thread_name : main, correlation_id : UNSET] Returning DeclinedScopeException as not all requested scopes are granted, Requested scopes: [user.read, api://546ddd-6bddd-4ccd-87ff-543a4ceeqc7b1/sample_webapi_scope] Granted scopes:[email, openid, profile, User.Read] Android 30

Agrawal C, Akash 41 Reputation points

2021-07-16T16:32:05.677+00:00

2021-07-16 21:47:23.075 9162-9162/com.accenture.inform D/SplashScreenFragment: Authentication failed: com.microsoft.identity.client.exception.MsalDeclinedScopeException: Some or all requested scopes have been declined by the Server
2021-07-16 21:47:23.075 9162-9162/com.accenture.inform D/SplashScreenFragment: com.microsoft.identity.client.exception.MsalDeclinedScopeException: Some or all requested scopes have been declined by the Server
Anshul Kumar (MINDTREE LIMITED) 6 Reputation points

2021-10-11T11:39:38.17+00:00

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

Agrawal C, Akash 41 Reputation points

2021-07-16T16:32:05.677+00:00

2021-07-16 21:47:23.075 9162-9162/com.accenture.inform D/SplashScreenFragment: Authentication failed: com.microsoft.identity.client.exception.MsalDeclinedScopeException: Some or all requested scopes have been declined by the Server
2021-07-16 21:47:23.075 9162-9162/com.accenture.inform D/SplashScreenFragment: com.microsoft.identity.client.exception.MsalDeclinedScopeException: Some or all requested scopes have been declined by the Server
Anshul Kumar (MINDTREE LIMITED) 6 Reputation points

2021-10-11T11:39:38.17+00:00

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

Answer 1

AmanpreetSingh-MSFT 56,006

Hi @Agrawal C, Akash · Thank you for reaching out.

Looking at the error, I suspect that the scopes you have added under the API permissions blade of the client application, does not contain all the required scopes to authorize the client to access the web api. Make sure below steps are done under Azure AD:

App Registration > Select the application registered as Web API > Expose as API > Add required scopes.
App Registration > Select the application registered as Client/Native App > API Permissions > Add all the scopes added in above step > Click on Grant Admin consent.

If you still encounter the error, please share the correlation ID, request ID and timestamp that you get along with the error. I will try to track that in our backend database to identify the issue.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

AmanpreetSingh-MSFT 56,006 Reputation points

2021-07-22T04:15:16.623+00:00

Hi @Agrawal C, Akash · I just wanted to check if you had a chance to test it out.
Agrawal C, Akash 41 Reputation points

2021-07-23T07:15:52.563+00:00

Hi @AmanpreetSingh-MSFT thanku for looking into this.
Its mapped right scope. I am verifying this the issue now there is no error coming but token is not consisting the audience hence that token is not working.
From msal library i am passing the scope but its not taking. Since its public forum i cant put detail like client id to you to debug.

So in summary.
1-Web API has scopes and admin grant is also there. Client App is having permission added to access web api.
2- Earlier issue was coming which shown earlier. Now issue is not coming but token which is getting in return is having no audience. Its not working to fetch data from webapi.
3- Cant share client id details as its public forum. Is there any other way?
Onyango, David 1 Reputation point

2021-11-14T21:25:42.43+00:00

Did you get a solution on this? I am also getting the same error message in my android app despite following the registration steps as recommended by @AmanpreetSingh-MSFT
The error I am getting is, "declined_scope_errorMessage: Some or all requested scopes have been declined by the server". No correlation ID has been assigned

Not able to access web api hosted in Azure enviornment

0 additional answers

Activity