Azure CLI doesn't return token for scope: ERROR: (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112Β #30491
Description
Describe the bug
Hi team,
I have an Entra App Registration with an Exposed API Scope and App Role associated with it. I've also associated the Microsoft Azure CLI Enterprise App with GUID 04b07795-8ddb-461a-bbee-02f9e1bf7b46 within the 'Authorized client applications` area of my app registration.
When trying to obtain an access token using this scope, I receive a strange and obstruse error: (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112 and when inspecting the AZURE CLI debug logs, I see an error about the auth being to the wrong tenant. It is not the wrong tenant, and I am logged in no problems.
Either way, the error is pretty unhelpful and doesn't offer much in the way of what is wrong. I am logged into Azure CLI, I am authenticated to the correct tenant, with the correct account.
This call works fine with the Azure Developer CLI using
azd auth login`
azd auth token --output json --scope api://MY_GUID/API.Access
Interestingly, AZD only works, if I add the Azure CLI Enterprise App as an Authorized Client application within the App Registrastion.
But it doesn't work for Azure CLI.
Related command
> az account get-access-token --resource api://MY_GUID/API.Access
(pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
Please explicitly log in with:
az login --scope api://MY_GUID/API.Access/.default
ο 13:29:44 ξΏ TestApiCall
> az login --scope api://MY_GUID/API.Access/.default
Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136
(pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
Please explicitly log in with:
az login
Errors
invalid_resource AADSTS500011: The resource principal named api://SANITISED/API.Access was not found in the tenant named SANITISED. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
Issue script & Debug output
Debug logging from Azure CLI when attempting this:
30332 : 2024-12-07 13:38:24,458 : DEBUG : cli.knack.log : File logging enabled - writing logs to 'C:\Users\SANITISED\.azure\logs'.
30332 : 2024-12-07 13:38:24,458 : DEBUG : cli.knack.cli : Command arguments: ['account', 'get-access-token', '--resource', 'api://SANITISED/API.Access']
30332 : 2024-12-07 13:38:24,458 : DEBUG : cli.knack.cli : __init__ debug log:
Enable color in terminal.
30332 : 2024-12-07 13:38:24,458 : DEBUG : cli.knack.cli : Event: Cli.PreExecute []
30332 : 2024-12-07 13:38:24,459 : DEBUG : cli.knack.cli : Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x00000176DD9FB380>, <function OutputProducer.on_global_arguments at 0x00000176DDD9C0E0>, <function CLIQuery.on_global_arguments at 0x00000176DDDC14E0>]
30332 : 2024-12-07 13:38:24,461 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreCommandTableCreate []
30332 : 2024-12-07 13:38:24,468 : DEBUG : cli.azure.cli.core : Modules found from index for 'account': ['azure.cli.command_modules.profile', 'azure.cli.command_modules.resource']
30332 : 2024-12-07 13:38:24,468 : DEBUG : cli.azure.cli.core : Loading command modules:
30332 : 2024-12-07 13:38:24,468 : DEBUG : cli.azure.cli.core : Name Load Time Groups Commands
30332 : 2024-12-07 13:38:24,473 : DEBUG : cli.azure.cli.core : profile 0.005 2 8
30332 : 2024-12-07 13:38:25,430 : DEBUG : cli.azure.cli.core : resource 0.957 52 232
30332 : 2024-12-07 13:38:25,430 : DEBUG : cli.azure.cli.core : Total (2) 0.961 54 240
30332 : 2024-12-07 13:38:25,430 : DEBUG : cli.azure.cli.core : Loaded 53 groups, 240 commands.
30332 : 2024-12-07 13:38:25,430 : DEBUG : cli.azure.cli.core : Found a match in the command table.
30332 : 2024-12-07 13:38:25,431 : DEBUG : cli.azure.cli.core : Raw command : account get-access-token
30332 : 2024-12-07 13:38:25,431 : DEBUG : cli.azure.cli.core : Command table: account get-access-token
30332 : 2024-12-07 13:38:25,431 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x00000176DEBB1D00>]
30332 : 2024-12-07 13:38:25,431 : DEBUG : cli.azure.cli.core.azlogging : metadata file logging enabled - writing logs to 'C:\Users\SANITISED\.azure\commands\2024-12-07.13-38-25.account_get-access-token.30332.log'.
30332 : 2024-12-07 13:38:25,432 : INFO : az_command_data_logger : command args: account get-access-token --resource {}
30332 : 2024-12-07 13:38:25,433 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x00000176DEC2D800>]
30332 : 2024-12-07 13:38:25,436 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPostArgumentLoad []
30332 : 2024-12-07 13:38:25,437 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x00000176DEC2D8A0>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x00000176DEC2D9E0>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x00000176DEC2DA80>]
30332 : 2024-12-07 13:38:25,440 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnCommandTableLoaded []
30332 : 2024-12-07 13:38:25,440 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreParseArgs []
30332 : 2024-12-07 13:38:25,441 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x00000176DDD9C180>, <function CLIQuery.handle_query_parameter at 0x00000176DDDC1580>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x00000176DEC2D940>]
30332 : 2024-12-07 13:38:25,496 : DEBUG : cli.azure.cli.core.auth.persistence : build_persistence: location='C:\\Users\\SANITISED\\.azure\\msal_token_cache.bin', encrypt=True
30332 : 2024-12-07 13:38:25,523 : DEBUG : cli.azure.cli.core.auth.binary_cache : load: C:\Users\SANITISED\.azure\msal_http_cache.bin
30332 : 2024-12-07 13:38:25,524 : DEBUG : urllib3.util.retry : Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
30332 : 2024-12-07 13:38:25,524 : DEBUG : msal.authority : Initializing with Entra authority: https://login.microsoftonline.com/SANITISED
30332 : 2024-12-07 13:38:25,524 : DEBUG : msal.authority : openid_config("https://login.microsoftonline.com/SANITISED/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/SANITISED/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/SANITISED/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/SANITISED/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/SANITISED/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/SANITISED/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/SANITISED/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/SANITISED/kerberos', 'tenant_region_scope': 'EU', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
30332 : 2024-12-07 13:38:25,536 : DEBUG : msal.application : Broker enabled? True
30332 : 2024-12-07 13:38:25,541 : DEBUG : cli.azure.cli.core.auth.msal_credentials : UserCredential.get_token: scopes=('api://SANITISED/API.Access/.default',), claims=None, kwargs={}
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:422 Printing Telemetry for Correlation ID: 280496ba-af22-4f84-9738-b0e629bff6b4
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: start_time, Value: 2024-12-07T13:38:25.000Z
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: api_name, Value: ReadAccountById
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: was_request_throttled, Value: false
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: authority_type, Value: Unknown
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: msal_version, Value: 1.1.0+local
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: correlation_id, Value: 280496ba-af22-4f84-9738-b0e629bff6b4
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: broker_app_used, Value: false
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: stop_time, Value: 2024-12-07T13:38:25.000Z
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: msalruntime_version, Value: 0.16.2
30332 : 2024-12-07 13:38:25,565 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: is_successful, Value: true
30332 : 2024-12-07 13:38:25,566 : DEBUG : msal.broker : [MSAL:0001] INFO LogTelemetryData:430 Key: request_duration, Value: 0
30332 : 2024-12-07 13:38:25,566 : DEBUG : msal.broker : [MSAL:0002] WARNING SetAuthorityUri:78 Initializing authority from URI 'https://login.microsoftonline.com/SANITISED' without authority type, defaulting to MsSts
30332 : 2024-12-07 13:38:25,566 : DEBUG : msal.broker : [MSAL:0002] INFO SetCorrelationId:258 Set correlation ID: 280496ba-af22-4f84-9738-b0e629bff6b4
30332 : 2024-12-07 13:38:25,566 : DEBUG : msal.broker : [MSAL:0002] INFO EnqueueBackgroundRequest:1000 The original authority is 'https://login.microsoftonline.com/SANITISED'
30332 : 2024-12-07 13:38:25,566 : DEBUG : msal.broker : [MSAL:0002] INFO ModifyAndValidateAuthParameters:243 Authority Realm: SANITISED
30332 : 2024-12-07 13:38:25,566 : DEBUG : msal.broker : [MSAL:0002] WARNING TryEnqueueMsaDeviceCredentialAcquisitionAndContinue:1052 MsaDeviceOperationProvider is not available. Not attempting to register the device.
30332 : 2024-12-07 13:38:25,568 : DEBUG : msal.broker : [MSAL:0003] INFO StorageTokenResponse:84 StorageTokenResponse account constructor invoked. This is only expected in Runtime flows
30332 : 2024-12-07 13:38:25,571 : DEBUG : msal.broker : [MSAL:0003] WARNING DiscardAccessAndIdTokensIfUnusable:808 No access token found in the cache
30332 : 2024-12-07 13:38:25,573 : DEBUG : msal.broker : [MSAL:0003] WARNING StorageTokenResponse:15 No credentials found in the cache
30332 : 2024-12-07 13:38:25,584 : DEBUG : msal.broker : [MSAL:0003] WARNING GetPlatformPropertiesFromStorage:2013 No account found in cache.
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] ERROR ErrorInternalImpl:134 Created an error: 4usqa, StatusInternal::IncorrectConfiguration, InternalEvent::None, Error Code 3399614475, Context '(pii)'
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:422 Printing Telemetry for Correlation ID: 280496ba-af22-4f84-9738-b0e629bff6b4
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: start_time, Value: 2024-12-07T13:38:25.000Z
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: api_name, Value: AcquireTokenSilently
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: was_request_throttled, Value: false
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: authority_type, Value: AAD
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: read_token, Value: ID
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: msal_version, Value: 1.1.0+local
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: api_status_code, Value: StatusInternal::IncorrectConfiguration
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: client_id, Value: SANITISED
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: correlation_id, Value: 280496ba-af22-4f84-9738-b0e629bff6b4
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: broker_app_used, Value: true
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: stop_time, Value: 2024-12-07T13:38:26.000Z
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: all_error_tags, Value: 4usqa|4usqa
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: msalruntime_version, Value: 0.16.2
30332 : 2024-12-07 13:38:26,281 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: original_authority, Value: https://login.microsoftonline.com/SANITISED
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: request_eligible_for_broker, Value: true
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: additional_query_parameters_count, Value: 0
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: storage_read, Value: DAC|DID|DAMD
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: is_successful, Value: false
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,500011,0,87283.2723,","ui_visible":false,"server_error_code":500011,"scope":"profile api://SANITISED/API.Access/.default offline_access openid","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/SANITISED","provider_id":"https://login.windows.net","oauth_error_code":"invalid_resource","http_status":400,"http_event_count":1,"http_content_type":"application/json; charset=utf-8","http_content_size":795,"device_join":"aadj","correlation_id":"{280496ba-af22-4f84-9738-b0e629bff6b4}","client_id":"SANITISED","cache_event_count":0,"broker_version":"10.0.22621.4391","authority":"https://login.microsoftonline.com/SANITISED","api_error_code":-895352821,"account_join_on_start":"secondary","account_join_on_end":"secondary","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":0,"is_cached":0}
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: auth_flow, Value: Broker
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: broker_error_location, Value: 4usqa
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: api_error_code, Value: 3399614475
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: api_error_tag, Value: 4usqa
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: api_error_context, Value: (pii)
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: authorization_type, Value: WindowsIntegratedAuth
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:430 Key: request_duration, Value: 714
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:435 Printing Execution Flow:
30332 : 2024-12-07 13:38:26,282 : DEBUG : msal.broker : [MSAL:0003] INFO LogTelemetryData:443 {"t":"4s7uc","tid":2,"ts":0,"l":2},{"t":"4sufd","tid":2,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":2,"ts":0,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":0,"s":1,"l":2},{"t":"8b2yn","tid":3,"ts":0,"l":2},{"t":"8dqkx","tid":3,"ts":0,"l":2},{"t":"8dqik","tid":3,"ts":0,"l":2},{"t":"4q2di","tid":3,"ts":0,"l":2},{"t":"4qnng","tid":3,"ts":0,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":3,"ts":2,"l":2},{"t":"8b2ht","tid":3,"ts":2,"l":2},{"t":"4qnno","tid":3,"ts":2,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":5,"l":2,"a":2,"ie":1},{"t":"8dqir","tid":3,"ts":5,"l":2},{"t":"4qwi1","tid":3,"ts":5,"l":2},{"t":"4qnna","tid":3,"ts":5,"l":2,"a":2,"ie":0},{"t":"4qnm9","tid":3,"ts":6,"l":2,"a":2,"ie":1},{"t":"8dqip","tid":3,"ts":6,"l":2},{"t":"4qnno","tid":3,"ts":6,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":6,"l":2,"a":2,"ie":1},{"t":"8b2hu","tid":3,"ts":7,"l":2},{"t":"5b8fg","tid":3,"ts":17,"l":2},{"t":"8dqk0","tid":3,"ts":17,"l":2},{"t":"4qnng","tid":3,"ts":17,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":18,"l":2,"a":2,"ie":1},{"t":"8dqjd","tid":3,"ts":18,"l":2},{"t":"694nj","tid":3,"ts":18,"l":2,"a":10,"ie":0},{"t":"4vw1f","tid":3,"ts":18,"l":2},{"t":"4wqnh","tid":3,"ts":18,"l":2},{"t":"4vw1c","tid":3,"ts":34,"l":2},{"t":"4vw1b","tid":3,"ts":34,"l":2},{"t":"4wqnk","tid":3,"ts":34,"l":2},{"t":"6omfm","tid":3,"ts":43,"l":2},{"t":"4vw1a","tid":3,"ts":43,"l":2},{"t":"4wqnf","tid":3,"ts":43,"l":2},{"t":"4wqm5","tid":3,"ts":59,"l":2},{"t":"4wqm6","tid":3,"ts":59,"l":2},{"t":"4u9jc","tid":3,"ts":714,"l":2},{"t":"58yep","tid":3,"ts":715,"l":2},{"t":"694nk","tid":3,"ts":715,"l":2,"a":10,"ie":1},{"t":"8dqk1","tid":3,"ts":715,"l":2},{"t":"646u1","tid":3,"ts":715,"l":2}
30332 : 2024-12-07 13:38:26,355 : DEBUG : cli.azure.cli.core.azclierror : Traceback (most recent call last):
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 666, in execute
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 733, in _run_jobs_serially
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 703, in _run_job
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 336, in __call__
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 121, in handler
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/profile/custom.py", line 83, in get_access_token
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 465, in get_raw_token
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/msal_credentials.py", line 68, in get_token
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/util.py", line 149, in check_result
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/util.py", line 53, in aad_error_handler
azure.cli.core.azclierror.AuthenticationError: (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
30332 : 2024-12-07 13:38:26,433 : ERROR : cli.azure.cli.core.azclierror : (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
30332 : 2024-12-07 13:38:26,434 : ERROR : az_command_data_logger : (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
30332 : 2024-12-07 13:38:26,435 : DEBUG : cli.knack.cli : Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x00000176DEBB1F80>]
30332 : 2024-12-07 13:38:26,435 : INFO : az_command_data_logger : exit code: 1
30332 : 2024-12-07 13:38:26,435 : INFO : cli.__main__ : Command ran in 3.020 seconds (init: 1.042, invoke: 1.978)
30332 : 2024-12-07 13:38:26,583 : INFO : telemetry.main : Begin splitting cli events and extra events, total events: 1
30332 : 2024-12-07 13:38:26,583 : INFO : telemetry.client : Accumulated 0 events. Flush the clients.
30332 : 2024-12-07 13:38:26,583 : INFO : telemetry.main : Finish splitting cli events and extra events, cli events: 1
30332 : 2024-12-07 13:38:26,584 : INFO : telemetry.save : Save telemetry record of length 4407 in cache file under C:\Users\SANITISED\.azure\telemetry\20241207133826583
30332 : 2024-12-07 13:38:26,584 : INFO : telemetry.main : Begin creating telemetry upload process.
30332 : 2024-12-07 13:38:26,585 : INFO : telemetry.process : Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry\__init__.pyc C:\Users\SANITISED\.azure C:\Users\SANITISED\.azure\telemetry\20241207133826583"
30332 : 2024-12-07 13:38:26,636 : INFO : telemetry.process : Return from creating process 32004
30332 : 2024-12-07 13:38:26,637 : INFO : telemetry.main : Finish creating telemetry upload process.
23668 : 2024-12-07 13:38:31,539 : DEBUG : cli.knack.log : File logging enabled - writing logs to 'C:\Users\SANITISED\.azure\logs'.
23668 : 2024-12-07 13:38:31,539 : DEBUG : cli.knack.cli : Command arguments: ['login', '--scope', 'api://SANITISED/API.Access/.default']
23668 : 2024-12-07 13:38:31,539 : DEBUG : cli.knack.cli : __init__ debug log:
Enable color in terminal.
23668 : 2024-12-07 13:38:31,539 : DEBUG : cli.knack.cli : Event: Cli.PreExecute []
23668 : 2024-12-07 13:38:31,540 : DEBUG : cli.knack.cli : Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x0000026998F2B380>, <function OutputProducer.on_global_arguments at 0x00000269992CC0E0>, <function CLIQuery.on_global_arguments at 0x00000269992F14E0>]
23668 : 2024-12-07 13:38:31,541 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreCommandTableCreate []
23668 : 2024-12-07 13:38:31,549 : DEBUG : cli.azure.cli.core : Modules found from index for 'login': ['azure.cli.command_modules.profile']
23668 : 2024-12-07 13:38:31,550 : DEBUG : cli.azure.cli.core : Loading command modules:
23668 : 2024-12-07 13:38:31,550 : DEBUG : cli.azure.cli.core : Name Load Time Groups Commands
23668 : 2024-12-07 13:38:31,554 : DEBUG : cli.azure.cli.core : profile 0.005 2 8
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.azure.cli.core : Total (1) 0.005 2 8
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.azure.cli.core : Loaded 2 groups, 8 commands.
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.azure.cli.core : Found a match in the command table.
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.azure.cli.core : Raw command : login
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.azure.cli.core : Command table: login
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x000002699A081D00>]
23668 : 2024-12-07 13:38:31,555 : DEBUG : cli.azure.cli.core.azlogging : metadata file logging enabled - writing logs to 'C:\Users\SANITISED\.azure\commands\2024-12-07.13-38-31.login.23668.log'.
23668 : 2024-12-07 13:38:31,556 : INFO : az_command_data_logger : command args: login --scope {}
23668 : 2024-12-07 13:38:31,556 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x000002699A19D800>]
23668 : 2024-12-07 13:38:31,559 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPostArgumentLoad []
23668 : 2024-12-07 13:38:31,559 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x000002699A19D8A0>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x000002699A19D9E0>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x000002699A19DA80>]
23668 : 2024-12-07 13:38:31,561 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnCommandTableLoaded []
23668 : 2024-12-07 13:38:31,561 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPreParseArgs []
23668 : 2024-12-07 13:38:31,561 : DEBUG : cli.knack.cli : Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x00000269992CC180>, <function CLIQuery.handle_query_parameter at 0x00000269992F1580>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x000002699A19D940>]
23668 : 2024-12-07 13:38:31,683 : DEBUG : cli.azure.cli.core.auth.persistence : build_persistence: location='C:\\Users\\SANITISED\\.azure\\msal_token_cache.bin', encrypt=True
23668 : 2024-12-07 13:38:31,716 : DEBUG : cli.azure.cli.core.auth.binary_cache : load: C:\Users\SANITISED\.azure\msal_http_cache.bin
23668 : 2024-12-07 13:38:32,306 : DEBUG : urllib3.util.retry : Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
23668 : 2024-12-07 13:38:32,307 : DEBUG : msal.authority : Initializing with Entra authority: https://login.microsoftonline.com/organizations
23668 : 2024-12-07 13:38:32,307 : DEBUG : msal.authority : openid_config("https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/organizations/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/{tenantid}/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/organizations/kerberos', 'tenant_region_scope': None, 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
23668 : 2024-12-07 13:38:32,320 : DEBUG : msal.application : Broker enabled? True
23668 : 2024-12-07 13:38:32,321 : DEBUG : msal.application : Falls back to broker._signin_interactively()
23668 : 2024-12-07 13:38:32,321 : WARNING : cli.azure.cli.core.auth.identity : Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136
23668 : 2024-12-07 13:38:32,332 : DEBUG : msal.broker : [MSAL:0001] WARNING SetAuthorityUri:78 Initializing authority from URI 'https://login.microsoftonline.com/organizations' without authority type, defaulting to MsSts
23668 : 2024-12-07 13:38:32,339 : DEBUG : msal.broker : [MSAL:0002] INFO SetCorrelationId:258 Set correlation ID: 12a4e21e-54a3-436b-a196-9b1b15b1c575
23668 : 2024-12-07 13:38:32,341 : DEBUG : msal.broker : [MSAL:0002] INFO ExecuteInteractiveRequest:1159 The original authority is 'https://login.microsoftonline.com/organizations'
23668 : 2024-12-07 13:38:32,341 : DEBUG : msal.broker : [MSAL:0002] WARNING TryNormalizeRealm:2420 No HomeAccountId provided to normalize the realm
23668 : 2024-12-07 13:38:32,341 : DEBUG : msal.broker : [MSAL:0002] INFO ExecuteInteractiveRequest:1170 The normalized realm is ''
23668 : 2024-12-07 13:38:32,344 : DEBUG : msal.broker : [MSAL:0002] INFO ModifyAndValidateAuthParameters:219 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
23668 : 2024-12-07 13:38:32,344 : DEBUG : msal.broker : [MSAL:0002] INFO ModifyAndValidateAuthParameters:219 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
23668 : 2024-12-07 13:38:32,344 : DEBUG : msal.broker : [MSAL:0002] INFO ModifyAndValidateAuthParameters:243 Authority Realm: organizations
23668 : 2024-12-07 13:38:32,344 : DEBUG : msal.broker : [MSAL:0002] WARNING TryEnqueueMsaDeviceCredentialAcquisitionAndContinue:1052 MsaDeviceOperationProvider is not available. Not attempting to register the device.
23668 : 2024-12-07 13:38:32,345 : DEBUG : msal.broker : [MSAL:0003] WARNING ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token reads will fail
23668 : 2024-12-07 13:38:32,346 : DEBUG : msal.broker : [MSAL:0003] WARNING ReadAccountById:227 Account id is empty - account not found
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] ERROR ErrorInternalImpl:134 Created an error: 4usqa, StatusInternal::IncorrectConfiguration, InternalEvent::None, Error Code 3399614475, Context '(pii)'
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:422 Printing Telemetry for Correlation ID: 12a4e21e-54a3-436b-a196-9b1b15b1c575
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: start_time, Value: 2024-12-07T13:38:32.000Z
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: api_name, Value: SignInInteractively
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: was_request_throttled, Value: false
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: authority_type, Value: Unknown
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: msal_version, Value: 1.1.0+local
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: api_status_code, Value: StatusInternal::IncorrectConfiguration
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: client_id, Value: SANITISED
23668 : 2024-12-07 13:38:38,877 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: correlation_id, Value: 12a4e21e-54a3-436b-a196-9b1b15b1c575
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: broker_app_used, Value: true
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: stop_time, Value: 2024-12-07T13:38:38.000Z
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: all_error_tags, Value: 4usqa
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: msalruntime_version, Value: 0.16.2
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: original_authority, Value: https://login.microsoftonline.com/organizations
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: request_eligible_for_broker, Value: true
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: additional_query_parameters_count, Value: 2
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: read_token_last_error, Value: missing required parameter
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: auth_flow, Value: Broker
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: ui_event_count, Value: 1
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,500011,0,99883.4689,","ui_visible":false,"server_error_code":500011,"scope":"profile api://SANITISED/API.Access/.default offline_access openid","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/SANITISED","provider_id":"https://login.windows.net","oauth_error_code":"invalid_resource","http_status":400,"http_event_count":1,"http_content_type":"application/json; charset=utf-8","http_content_size":795,"device_join":"aadj","correlation_id":"{12a4e21e-54a3-436b-a196-9b1b15b1c575}","client_id":"SANITISED","cache_event_count":0,"broker_version":"10.0.22621.4391","authority":"https://login.microsoftonline.com/organizations","api_error_code":-895352821,"account_join_on_start":"secondary","account_join_on_end":"secondary","silent_code":3399614475,"silent_bi_sub_code":0,"silent_message":"V2Error: invalid_resource AADSTS500011: The resource principal named api://SANITISED/API.Access was not found in the tenant named SANITISED. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant. Trace ID: 555c8222-bdc6-4875-bd6e-22a644a42f00 Correlation ID: 12a4e21e-54a3-436b-a196-9b1b15b1c575 Timestamp: 2024-12-07 13:38:39Z","silent_mats":{"x_ms_clitelem":"1,500011,0,99883.4689,","ui_visible":false,"server_error_code":500011,"scope":"profile api://SANITISED/API.Access/.default offline_access openid","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/SANITISED","provider_id":"https://login.windows.net","oauth_error_code":"invalid_resource","http_status":400,"http_event_count":1,"http_content_type":"application/json; charset=utf-8","http_content_size":795,"device_join":"aadj","correlation_id":"{12a4e21e-54a3-436b-a196-9b1b15b1c575}","client_id":"SANITISED","cache_event_count":0,"broker_version":"10.0.22621.4391","authority":"https://login.microsoftonline.com/organizations","api_error_code":-895352821,"account_join_on_start":"secondary","account_join_on_end":"secondary"},"silent_status":5,"is_cached":0}
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: authorization_type, Value: Interactive
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: api_error_code, Value: 3399614475
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: api_error_tag, Value: 4usqa
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: api_error_context, Value: (pii)
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: is_successful, Value: false
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:430 Key: request_duration, Value: 6536
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:435 Printing Execution Flow:
23668 : 2024-12-07 13:38:38,878 : DEBUG : msal.broker : [MSAL:0004] INFO LogTelemetryData:443 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":0,"l":2},{"t":"4sufd","tid":2,"ts":1,"s":2,"l":2},{"t":"4swgg","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":1,"s":1,"l":2},{"t":"8dqim","tid":3,"ts":1,"l":2},{"t":"8dqkl","tid":3,"ts":2,"l":2,"a":9,"ie":0},{"t":"54uxe","tid":2,"ts":2,"l":2},{"t":"4wqm9","tid":4,"ts":5850,"l":2},{"t":"4o9ak","tid":4,"ts":5850,"l":2},{"t":"4o9ai","tid":4,"ts":5856,"l":2},{"t":"8dqkn","tid":4,"ts":6533,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":6533,"l":2,"a":9,"ie":1},{"t":"646u1","tid":4,"ts":6533,"l":2}
23668 : 2024-12-07 13:38:39,202 : DEBUG : cli.azure.cli.core.azclierror : Traceback (most recent call last):
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 666, in execute
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 733, in _run_jobs_serially
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 703, in _run_job
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 336, in __call__
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 121, in handler
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/profile/custom.py", line 173, in login
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 176, in login
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 173, in login_with_auth_code
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/util.py", line 149, in check_result
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/util.py", line 53, in aad_error_handler
azure.cli.core.azclierror.AuthenticationError: (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
23668 : 2024-12-07 13:38:39,271 : ERROR : cli.azure.cli.core.azclierror : (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
23668 : 2024-12-07 13:38:39,271 : ERROR : az_command_data_logger : (pii). Status: Response_Status.Status_IncorrectConfiguration, Error code: 3399614475, Tag: 508634112
23668 : 2024-12-07 13:38:39,272 : DEBUG : cli.knack.cli : Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x000002699A081F80>]
23668 : 2024-12-07 13:38:39,272 : INFO : az_command_data_logger : exit code: 1
23668 : 2024-12-07 13:38:39,273 : INFO : cli.__main__ : Command ran in 8.904 seconds (init: 1.171, invoke: 7.733)
23668 : 2024-12-07 13:38:39,401 : INFO : telemetry.main : Begin splitting cli events and extra events, total events: 1
23668 : 2024-12-07 13:38:39,401 : INFO : telemetry.client : Accumulated 0 events. Flush the clients.
23668 : 2024-12-07 13:38:39,401 : INFO : telemetry.main : Finish splitting cli events and extra events, cli events: 1
23668 : 2024-12-07 13:38:39,402 : INFO : telemetry.save : Save telemetry record of length 4367 in cache file under C:\Users\SANITISED\.azure\telemetry\20241207133839401
23668 : 2024-12-07 13:38:39,402 : INFO : telemetry.main : Begin creating telemetry upload process.
23668 : 2024-12-07 13:38:39,403 : INFO : telemetry.process : Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry\__init__.pyc C:\Users\SANITISED\.azure C:\Users\SANITISED\.azure\telemetry\20241207133839401"
23668 : 2024-12-07 13:38:39,446 : INFO : telemetry.process : Return from creating process 10368
23668 : 2024-12-07 13:38:39,446 : INFO : telemetry.main : Finish creating telemetry upload process.
Expected behavior
I expect a valid JWT token response from my scope. This works with AzD CLI.
Environment Summary
> az --version
azure-cli 2.67.0
core 2.67.0
telemetry 1.1.0
Dependencies:
msal 1.31.0
azure-mgmt-resource 23.1.1
Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Extensions directory 'C:\Users\SANITISED\.azure\cliextensions'
Python (Windows) 3.12.7 (tags/v3.12.7:0b05ead, Oct 1 2024, 03:06:41) [MSC v.1941 64 bit (AMD64)]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
Additional context
Initially raised an issue with the Azure SDK for dotnet team as I spotted this whilst trying to use the DefaultAzureCredential() class for authentication locally when developing/debugging dotnet Azure PaaS code where we can use az login for local dev, and managed identity when the code runs in the PaaS context. Issue: Azure/azure-sdk-for-net#47412
Metadata
Metadata
Assignees
Labels
az resource/group/lock/tag/deployment/policy/managementapp/account management-groupaz login/accountAuto assign by botThe command of the issue is owned by Azure CLI teamIssues that are reported by GitHub users external to the Azure organization.The issue doesn't require a change to the product in order to be resolved. Most issues start as that