API Management - cannot log into developer portal

Question

API Management - cannot log into developer portal

Greg Yvkoff 151

I am struggling to log into the developer portal, could use some help.

I am an Administrator. Thus in section Users, my Auth type = Azure, State = Active, Groups = Administrators, and Email = my AAD email
In Identities, I added provider Azure Active Directory as per the documentation
In the portal itself, I enabled all Sign In and Sign Up widgets to use "Sign In With Oath" or "Sign Up With OAuth"

When I launch the portal site, I click on "Sign In via Azure Active Directory" button and select my account.
After authentication, it brings me to the "Complete sign up" page.
I enter my AAD email, first name, last name, click "Sign up" button, but get error "user with specified identity already exists".

Is it correct that after I am authenticated, it takes me to the "Complete sign up" page?
If it is correct, am I supposed to sign up with a different email address?

Mike Urnun 9,856 Reputation points Microsoft Employee

2020-09-02T00:02:23.133+00:00

"Complete sign up" page is expected when authenticating for the first time and you should use the same email address. Just to confirm, after going through the steps in the doc, did you republish the dev portal for the changes to take effect as per the note?
Greg Yvkoff 151 Reputation points

2020-09-02T06:36:57.053+00:00

Yes, i've published it dozens of times, making changes here and there, trying to figure out the issue. Note that when I do the sign up, it says "user with specified identity already exists" - my email exists in the Users section of "Developer portal" for the APIM.
S Srinath (D&AI/Koramangala/TVSMotor) 0 Reputation points

2023-12-08T08:08:03.9233333+00:00

@MikeUrnun-3849 Is this issue is resolved. on this below issues"

It appears that this occurs only when attempting to sign-in as an admin. Non-admin users aren't affected by it and they can sign-in successfully. If you need to carry out admin-specific operations in the Dev Portal, you can still sign in from the Azure Portal by clicking on the "Developer Portal" button. I have reported this issue to the APIM and am currently waiting for a response which I'll share here soon."

Iam also facing this can you please help me out how can i login if iam admin also i have organization AAD user

1 answer

Your answer

Mike Urnun 9,856 Reputation points Microsoft Employee

2020-09-02T00:02:23.133+00:00

"Complete sign up" page is expected when authenticating for the first time and you should use the same email address. Just to confirm, after going through the steps in the doc, did you republish the dev portal for the changes to take effect as per the note?
Greg Yvkoff 151 Reputation points

2020-09-02T06:36:57.053+00:00

Yes, i've published it dozens of times, making changes here and there, trying to figure out the issue. Note that when I do the sign up, it says "user with specified identity already exists" - my email exists in the Users section of "Developer portal" for the APIM.
S Srinath (D&AI/Koramangala/TVSMotor) 0 Reputation points

2023-12-08T08:08:03.9233333+00:00

@MikeUrnun-3849 Is this issue is resolved. on this below issues"

It appears that this occurs only when attempting to sign-in as an admin. Non-admin users aren't affected by it and they can sign-in successfully. If you need to carry out admin-specific operations in the Dev Portal, you can still sign in from the Azure Portal by clicking on the "Developer Portal" button. I have reported this issue to the APIM and am currently waiting for a response which I'll share here soon."

Iam also facing this can you please help me out how can i login if iam admin also i have organization AAD user

Answer 1

Mike Urnun 9,856 Microsoft Employee

Hi @Greg Yvkoff Gotcha - It's still a bit open-ended for me to pin the issue to a specific problem. I attempted to reproduce this on an existing APIM instance that I had running and did run into an issue at the "Complete Sign Up" page where after filling out the fields and submitting the form, I was met with the same "User with a specified identity already exists" error and not a success message. Ignoring the error message, I immediately navigated to the Sign-in page and was able to sign in successfully with my AAD account. Prior to getting here, I also noticed that I had an incorrect Redirect URL specified to my AAD App Registration which was causing the OAuth flow to fail because APIM provides separate Redirect URLs for Legacy and the new developer portals.

I'm going to start from scratch again with completely a new APIM instance shortly in an effort to identify any gaps that might exist in our documentation. If I don't find any faulty/missing step in the doc and if you also confirm that all of the steps were correctly followed in your setup, I would isolate the issue as something specific to your APIM instance and proceed to request you to send us an email with more info for identifying the root cause in 1:1 setting with you. Hope that's OK and please stay tuned for my next update soon.

UPDATE: APIM team confirmed that, for admin accounts, users have to log in to the Developer Portal via Azure Portal.

Mike Urnun 9,856 Reputation points Microsoft Employee

2020-09-03T02:07:48.777+00:00

@Greg Yvkoff Upon further review with a new APIM instance, I'm able to reproduce this issue and think that it's related to #42136 (and a possible regression). I'll reach out to the APIM team internally and update you here with my findings.
Mike Urnun 9,856 Reputation points Microsoft Employee

2020-09-09T23:19:07.667+00:00

@Greg Yvkoff Sorry for the delay. It appears that this occurs only when attempting to sign-in as an admin. Non-admin users aren't affected by it and they can sign-in successfully. If you need to carry out admin-specific operations in the Dev Portal, you can still sign in from the Azure Portal by clicking on the "Developer Portal" button. I have reported this issue to the APIM and am currently waiting for a response which I'll share here soon.
Kelly Bennett 6 Reputation points

2021-01-26T02:16:38.637+00:00

@Mike Urnun
This does not seem to be the case. I can't get anyone logged in using their work email (managed by our Azure organizational directory).

When they try to "Complete sign up" they are hit with the User with specified identity already exists whether they are admins or not.
Mark Leavesley 11 Reputation points

2021-10-13T16:38:31.22+00:00

I can confirm this is not the case. Span up a new API Management today, clicked the button to enable AAD on the portal (which does everything for you it seems), removed "username and password" identity, and published it. As others have noted here and elsewhere, signing in with AAD presents you with the 'Complete sign up' page that you cannot use your AAD email for. I asked a colleage to try, who is not an admin on API Management (but is for Azure, if that matters), and got the same thing.

Right now the dev portal is not usable for us as we can't get past this page.
S Srinath (D&AI/Koramangala/TVSMotor) 0 Reputation points

2023-12-08T08:09:15.8766667+00:00

@MikeUrnun-3849 Is this issues is resolved If resolved please refer me to some documentation

Share via

API Management - cannot log into developer portal

1 answer

Your answer