Error 500 on some tokens when trying to call /exchangeAccessToken on ACS

Question

Hi,

We have created a Communication Service on Azure, and we are trying to integrate it in a new SPA (in vuejs )
After trying to call /exchangeAccessToken on it with tokens obtains from https://login.microsoftonline.com.

Some of them return an error 500 as some account works without specific rights on them :
{"error":{"code":"OboUnexpectedError","message":"Internal server error."}}

Payload is correctly filled with the token and the requests are similar, except content of token.

And we can see all succeed and failed requests in Metrics under Authentication API Requests.

have you any idea on how can we advance on our problem ?

Answer 1

Hi @Cedric SAMMARITANO ,

Thanks for your patience. The requests are failing due to missing support of Conditional Access conditions in ACS. Conditional access conditions are part of the Azure Active Directory tenant configuration. ACS team is currently designing a feature with supported AAD capabilities in ACS with Teams identities that will resolve this problem. As of right now, there isn't an ETA as to when this feature will be released.

Best,
Grace