AADSTS700054: response_type 'id_token' is not enabled for the application

Question

AADSTS700054: response_type 'id_token' is not enabled for the application

Siti Norani 6

Hi, I registered a single-page application (SPA) in the Microsoft identity platform for MSAL v2. Firstly I tried on dev server and can access my web app via PC and mobile.

But then I registered a new SPA for QA server with same configuration as dev but I got error like below on mobile but I can access my web on PC.

Victor Wallenberg (SBK) 30 Reputation points

2024-01-09T15:34:39.3566667+00:00

I have the same problem but the pic does not show how it looks like in Azure today, new version??

1 answer

Your answer

Victor Wallenberg (SBK) 30 Reputation points

2024-01-09T15:34:39.3566667+00:00

I have the same problem but the pic does not show how it looks like in Azure today, new version??

Answer 1

AmanpreetSingh-MSFT 56,876 Moderator

@Siti Norani • Thank you for reaching out.

Based on the error, it looks like you are using the Implicit flow and the id_token is not enabled for the application.

To enable the ID_Token issuance for the application, you need to navigate to:

Azure AD > Application Registration > Search and open your application > Authentication > Under Implicit grant and hybrid flows section > select the checkbox for ID token as hightlighted below:

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Siti Norani 6 Reputation points

2022-06-14T02:19:29.69+00:00

Thanks, I did tick ID tokens box but it wont work.. Plus I used msal v2 that dont require ID tokens. I solved it by ensure my old SPA uses MSAL V1.
Luan Au 1 Reputation point

2022-12-05T12:34:11.687+00:00

In my case the issue was the App Service where I host my react SPA. The solution is to disable authentication in this App Service as I am already authenticating with the Enterprise App using MSAL 2.0. This setting seemed to interfere with the authentication process, giving the above error. This allows you to use MSAL 2.0 and the Authorization Code Flow with PKCE. Remember you are authenticating using the Enterprise App, not the App Service where you host the SPA.
Luan
Vimal Selvaraj 25 Reputation points

2023-03-07T04:44:42.5433333+00:00

there is no these checkboxes in my app
Kumar, Suraj 5 Reputation points

2023-03-28T10:25:06.0166667+00:00

I was able to resolve the issue, by following this answer.

Thanks.
Kumar, Suraj 5 Reputation points

2023-03-28T10:31:52.9333333+00:00

@Vimal: The "Implicit grant and hybrid flow" settings were hidden for one of my new App registrations, I was using. But when I searched for implicit grant, these showed up.
Sean Kang 0 Reputation points

2023-04-11T22:08:03.0266667+00:00

the implicit grant section is not in the authentication section anymore.
Teunis Roes 0 Reputation points

2023-08-17T09:06:36.92+00:00

Awesome! You helped me big time with this one :)

Share via

AADSTS700054: response_type 'id_token' is not enabled for the application

1 answer

Your answer