Skip to content

Web Activity in Azure Government Authentication with Service Principal fails with error Confidential Client is not supported in Cross Cloud request #719

@EntityAdam

Description

@EntityAdam

Questions:
Seems like the authentication request is trying to use Azure Commercial (login.microsoftonline.com) to authenticate the SP. How do we provide the correct authority (login.microsoftonline.us) for Azure Government?

If I use a REST call to get a token from login.microsoftonline.us, and pass the client credentials and secret, it works dandy.

Error:

GetSpnAuthenticationToken: Failed while processing request for access token with error: Failed to get access token by using service principal. Error: invalid_request, Error Message: AADSTS900382: Confidential Client is not supported in Cross Cloud request. Trace ID: {TRACE_ID} Correlation ID: {CORRELATION_ID} Timestamp: {TIMESTAMP}.
{
    "name": "SitesList",
    "type": "WebActivity",
    "dependsOn": [],
    "policy": {
        "timeout": "0.12:00:00",
        "retry": 0,
        "retryIntervalInSeconds": 30,
        "secureOutput": false,
        "secureInput": false
    },
    "userProperties": [],
    "typeProperties": {
        "method": "GET",
        "url": "https://graph.microsoft.us/v1.0/sites/root/lists",
        "authentication": {
            "type": "ServicePrincipal",
            "userTenant": "{TENANT_ID}",
            "username": "{SERVICE_PRINCIPAL_APP_ID",
            "resource": "https://graph.microsoft.us",
            "password": {
                "type": "SecureString",
                "value": "**********"
            }
        }
    }
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions