Forum Discussion

sathishP's avatar
sathishP
New Member
7 years ago
Solved

Problem in Access Token Generation: Tenant authorize not found.

I get this error while trying to get Access Token: Line of code: var authenticationResult = await authenticationContext.AcquireTokenAsync(ResourceUrl, ApplicationId, credential); "Tenant authoriz...
Need Help
  • sathishP's avatar
    sathishP
    7 years ago

    Resolved by reverting the assembly "Microsoft.IdentityModel.Clients.ActiveDirectory" to Version=3.13.9.1126.

     

     

    Using latest version of this assembly raised this issue. Version = 4.4.0.0

sathishP's avatar
sathishP
New Member
7 years ago

Resolved by reverting the assembly "Microsoft.IdentityModel.Clients.ActiveDirectory" to Version=3.13.9.1126.

 

 

Using latest version of this assembly raised this issue. Version = 4.4.0.0

mthierba's avatar
mthierba
Advocate I
7 years ago

Hi,

a future-proof resolution for this issue is to adjust the AAD Authority Url in your config. ADAL v4 performs a stricter authority validation than v3. Instead of https://login.windows.net/common/oauth2/authorize you should be using https://login.microsoftonline.com/common.

 

That is documented here: https://github.com/AzureAD/azure-activedirectory-library-for-dotnet/wiki/Changes-adalnet-4.0#better-authority-validation

 

Apparently, the former url has been given uncorrectly given in many official examples previously, and v3 was quite forgiving about it.

 

See also: https://github.com/AzureAD/azure-activedirectory-library-for-dotnet/issues/1346#issuecomment-432380338

 

No need to pin a prior ADAL version with that modification.

 

Hope that helps,

Mathias

  • Thanid's avatar
    Thanid
    Regular Visitor
    7 years ago

    Thank