Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials

[shleiAmy]

I have recently added AzureAttestationServiceEndpointResourceId and AzureAttestationServiceEndpointSuffix to AzAccount, and the current Az.Account version (1.7.0) should have contained the changes.

I am developing new powershell cmdlets for attestation and need to query the serviceClientCredientials from AzureAttestationServiceEndpointResourceId.

But I am getting the error: Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials.

After further debug, I found that AzureAttestationServiceEndpointResourceIdis is not defined in either Environment or ExtendedProperties dictinary.

Here is the version it refers to" #region Assembly Microsoft.Azure.PowerShell.Authentication.Abstractions, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35// C:\Users\shlei.nuget\packages\microsoft.azure.powershell.authentication.abstractions\1.3.4-preview\lib\netstandard2.0\Microsoft.Azure.PowerShell.Authentication.Abstractions.dll

PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> module

ModuleType Version    Name                                ExportedCommands
---------- -------    ----                                ----------------
Manifest   1.7.0      Az.Accounts                         {Add-AzEnvironment, Clear-AzContext, Clear-AzDefault, Connec…

PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> Get-AzEnvironment -Name AzureCloud | fl *

Name                                              : AzureCloud
EnableAdfsAuthentication                          : False
OnPremise                                         : False
ActiveDirectoryServiceEndpointResourceId          : https://management.core.windows.net/
AdTenant                                          : Common
GalleryUrl                                        : https://gallery.azure.com/
ManagementPortalUrl                               : https://go.microsoft.com/fwlink/?LinkId=254433
ServiceManagementUrl                              : https://management.core.windows.net/
PublishSettingsFileUrl                            : https://go.microsoft.com/fwlink/?LinkID=301775
ResourceManagerUrl                                : https://management.azure.com/
SqlDatabaseDnsSuffix                              : .database.windows.net
StorageEndpointSuffix                             : core.windows.net
ActiveDirectoryAuthority                          : https://login.microsoftonline.com/
GraphUrl                                          : https://graph.windows.net/
GraphEndpointResourceId                           : https://graph.windows.net/
TrafficManagerDnsSuffix                           : trafficmanager.net
AzureKeyVaultDnsSuffix                            : vault.azure.net
DataLakeEndpointResourceId                        : https://datalake.azure.net/
AzureDataLakeStoreFileSystemEndpointSuffix        : azuredatalakestore.net
AzureDataLakeAnalyticsCatalogAndJobEndpointSuffix : azuredatalakeanalytics.net
AzureKeyVaultServiceEndpointResourceId            : https://vault.azure.net
AzureOperationalInsightsEndpointResourceId        : https://api.loganalytics.io
AzureOperationalInsightsEndpoint                  : https://api.loganalytics.io/v1
AzureAnalysisServicesEndpointSuffix               : asazure.windows.net
AnalysisServicesEndpointResourceId                : https://region.asazure.windows.net
AzureAttestationServiceEndpointSuffix             : attest.azure.net
AzureAttestationServiceEndpointResourceId         : https://attest.azure.net
VersionProfiles                                   : {}
ExtendedProperties                                : {[OperationalInsightsEndpoint, https://api.loganalytics.io/v1], [OperationalInsightsEndpointResourceId,
                                                    https://api.loganalytics.io], [AzureAnalysisServicesEndpointSuffix, asazure.windows.net],
                                                    [AnalysisServicesEndpointResourceId, https://region.asazure.windows.net]…}
BatchEndpointResourceId                           : https://batch.core.windows.net/

Cost

[dingmeng-xue]

@msJinLei , I can see Amy’s problem in my environment that Attestation endpoint is not exposed. Please check our binaries in Az.Account 1.7.0.

[msJinLei]

@shleiAmy

After further debug, I found that AzureAttestationServiceEndpointResourceIdis is not defined in either Environment or ExtendedProperties dictinary.

• In what method, do you find AzureAttestationServiceEndpointResourceId is empty? According to the result of "Get-AzEnvironment -Name AzureCloud | fl *", AzureAttestationServiceEndpointResourceId' s value is "https://attest.azure.net". Please review the result you provided.

• From your email, I found the following exception

Message        : AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in
                 the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not
                 been installed by the administrator of the tenant or consented to by any user in the tenant. You
                 might have sent your authentication request to the wrong tenant.
                 Trace ID: cfcbee55-2f7f-4881-8fd0-40179ab71500
                 Correlation ID: 79ef4922-1363-478e-b0a9-ee0ac7d0c7fa
                 Timestamp: 2020-01-16 22:28:24Z

Could your check whether tenant is correct or anything else wrong with server side?

If you confirm server side is correct, please Set $DebugPreference='Continue' before run the cmdlets and reply us with email so that we can see whether anything wrong with http request.

[shleiAmy]

@msJinLei There is nothing wrong with server side

PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> Set $DebugPreference='Continue'
PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Set-AzAttestationPolicy : Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials.
At line:1 char:1
+ Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : CloseError: (:) [Set-AzAttestationPolicy], ArgumentException
+ FullyQualifiedErrorId : Microsoft.Azure.Commands.Attestation.SetAzureAttestationPolicy

[shleiAmy]

PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> Resolve-AzError
WARNING: Breaking changes in the cmdlet 'Resolve-AzError' :
WARNING:  - The `Resolve-Error` alias will be removed in a future release.  Please change any scripts that use this alias to use `Resolve-AzError` instead.


WARNING: NOTE : Go to https://aka.ms/azps-changewarnings for steps to suppress this breaking change warning, and other information on breaking changes in Azure PowerShell.


   HistoryId: 7
Message        : Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up
                 your Azure credentials.
StackTrace     :    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.GetServiceClientC
                 redentials(IAzureContext context, String targetEndpoint) in C:\myWorkingDirectory\azure-powershell\src
                 \Accounts\Authentication\Factories\AuthenticationFactory.cs:line 368
                    at
                 Microsoft.Azure.Commands.Attestation.Models.AttestationDataServiceClient..ctor(IAuthenticationFactory
                 authFactory, IAzureContext context) in C:\myWorkingDirectory\azure-powershell\src\Attestation\Attestat
                 ion\Models\AttestationDataServiceClient.cs:line 39
                    at Microsoft.Azure.Commands.Attestation.Models.AttestationDataServiceCmdletBase.get_AttestationData
                 Client() in C:\myWorkingDirectory\azure-powershell\src\Attestation\Attestation\Models\AttestationDataS
                 erviceCmdletBase.cs:line 30
                    at Microsoft.Azure.Commands.Attestation.SetAzureAttestationPolicy.ExecuteCmdlet() in C:\myWorkingDi
                 rectory\azure-powershell\src\Attestation\Attestation\Commands\SetAzureAttestationPolicy.cs:line 74
                    at Microsoft.WindowsAzure.Commands.Utilities.Common.CmdletExtensions.<>c__3`1.<ExecuteSynchronously
                 OrAsJob>b__3_0(T c)
                    at
                 Microsoft.WindowsAzure.Commands.Utilities.Common.CmdletExtensions.ExecuteSynchronouslyOrAsJob[T](T
                 cmdlet, Action`1 executor)
                    at
                 Microsoft.WindowsAzure.Commands.Utilities.Common.CmdletExtensions.ExecuteSynchronouslyOrAsJob[T](T
                 cmdlet)
                    at Microsoft.WindowsAzure.Commands.Utilities.Common.AzurePSCmdlet.ProcessRecord()
Exception      : System.ArgumentException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 7

Message        : Failed to acquire token silently as no token was found in the cache. Call method AcquireToken:
                 AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in
                 the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not
                 been installed by the administrator of the tenant or consented to by any user in the tenant. You
                 might have sent your authentication request to the wrong tenant.
                 Trace ID: cfcbee55-2f7f-4881-8fd0-40179ab71500
                 Correlation ID: 79ef4922-1363-478e-b0a9-ee0ac7d0c7fa
                 Timestamp: 2020-01-16 22:28:24Z
StackTrace     :    at Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.AcquireToken(AdalConfiguration
                 config, Action`1 promptAction, String userId, SecureString password, Boolean renew) in C:\myWorkingDir
                 ectory\azure-powershell\src\Accounts\Authentication\Authentication\UserTokenProvider.Netcore.cs:line
                 137
                    at
                 Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.GetAccessToken(AdalConfiguration
                 config, String promptBehavior, Action`1 promptAction, String userId, SecureString password, String
                 credentialType) in C:\myWorkingDirectory\azure-powershell\src\Accounts\Authentication\Authentication\U
                 serTokenProvider.Netcore.cs:line 48
                    at
                 Microsoft.Azure.Commands.Common.Authentication.AdalTokenProvider.GetAccessToken(AdalConfiguration
                 config, String promptBehavior, Action`1 promptAction, String userId, SecureString password, String
                 credentialType) in C:\myWorkingDirectory\azure-powershell\src\Accounts\Authentication\Authentication\A
                 dalTokenProvider.cs:line 110
                    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.Authenticate(IAzu
                 reAccount account, IAzureEnvironment environment, String tenant, SecureString password, String
                 promptBehavior, Action`1 promptAction, IAzureTokenCache tokenCache, String resourceId) in C:\myWorking
                 Directory\azure-powershell\src\Accounts\Authentication\Factories\AuthenticationFactory.cs:line 166
                    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.Authenticate(IAzu
                 reAccount account, IAzureEnvironment environment, String tenant, SecureString password, String
                 promptBehavior, Action`1 promptAction, String resourceId) in C:\myWorkingDirectory\azure-powershell\sr
                 c\Accounts\Authentication\Factories\AuthenticationFactory.cs:line 182
                    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.GetServiceClientC
                 redentials(IAzureContext context, String targetEndpoint) in C:\myWorkingDirectory\azure-powershell\src
                 \Accounts\Authentication\Factories\AuthenticationFactory.cs:line 357
Exception      : Microsoft.Azure.Commands.Common.Authentication.AadAuthenticationFailedException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 7

Message        : Failed to acquire token silently as no token was found in the cache. Call method AcquireToken
StackTrace     :    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenSilentHandler.SendTok
                 enRequestAsync()
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.CheckAndA
                 cquireTokenUsingBrokerAsync()
                    at
                 Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RunAsync()
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext.AcquireTokenSilentCommonAs
                 ync(String resource, ClientKey clientKey, UserIdentifier userId, IPlatformParameters parameters)
                    at
                 Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext.AcquireTokenSilentAsync(String
                 resource, String clientId, UserIdentifier userId)
                    at
                 Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.DoAcquireToken(AdalConfiguration
                 config, String userId, SecureString password, Action`1 promptAction, Boolean renew) in C:\myWorkingDir
                 ectory\azure-powershell\src\Accounts\Authentication\Authentication\UserTokenProvider.Netcore.cs:line
                 206
                    at
                 Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.SafeAquireToken(AdalConfiguration
                 config, Action`1 promptAction, String userId, SecureString password, Exception& ex) in C:\myWorkingDir
                 ectory\azure-powershell\src\Accounts\Authentication\Authentication\UserTokenProvider.Netcore.cs:line
                 151
Exception      : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalSilentTokenAcquisitionException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 7

Message        : AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in
                 the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not
                 been installed by the administrator of the tenant or consented to by any user in the tenant. You
                 might have sent your authentication request to the wrong tenant.
                 Trace ID: cfcbee55-2f7f-4881-8fd0-40179ab71500
                 Correlation ID: 79ef4922-1363-478e-b0a9-ee0ac7d0c7fa
                 Timestamp: 2020-01-16 22:28:24Z
StackTrace     :    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T]
                 (Boolean respondToDeviceAuthChallenge)
                    at
                 Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T]()
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendHttpM
                 essageAsync(IRequestParameters requestParameters)
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendToken
                 RequestByRefreshTokenAsync(String refreshToken)
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RefreshAc
                 cessTokenAsync(AuthenticationResultEx result)
Exception      : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalServiceException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 7

Message        : Response status code does not indicate success: 400 (BadRequest).
StackTrace     :
Exception      : System.Net.Http.HttpRequestException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 7

Message        : {"error":"invalid_resource","error_description":"AADSTS500011: The resource principal named
                 AzureAttestationServiceEndpointResourceId was not found in the tenant named
                 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not been installed by
                 the administrator of the tenant or consented to by any user in the tenant. You might have sent your
                 authentication request to the wrong tenant.\r\nTrace ID:
                 cfcbee55-2f7f-4881-8fd0-40179ab71500\r\nCorrelation ID:
                 79ef4922-1363-478e-b0a9-ee0ac7d0c7fa\r\nTimestamp: 2020-01-16
                 22:28:24Z","error_codes":[500011],"timestamp":"2020-01-16 22:28:24Z","trace_id":"cfcbee55-2f7f-4881-8f
                 d0-40179ab71500","correlation_id":"79ef4922-1363-478e-b0a9-ee0ac7d0c7fa","error_uri":"https://login.mi
                 crosoftonline.com/error?code=500011"}: Unknown error
StackTrace     :
Exception      : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 7


   HistoryId: 5
Message        : Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up
                 your Azure credentials.
StackTrace     :    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.GetServiceClientC
                 redentials(IAzureContext context, String targetEndpoint) in C:\myWorkingDirectory\azure-powershell\src
                 \Accounts\Authentication\Factories\AuthenticationFactory.cs:line 368
                    at
                 Microsoft.Azure.Commands.Attestation.Models.AttestationDataServiceClient..ctor(IAuthenticationFactory
                 authFactory, IAzureContext context) in C:\myWorkingDirectory\azure-powershell\src\Attestation\Attestat
                 ion\Models\AttestationDataServiceClient.cs:line 39
                    at Microsoft.Azure.Commands.Attestation.Models.AttestationDataServiceCmdletBase.get_AttestationData
                 Client() in C:\myWorkingDirectory\azure-powershell\src\Attestation\Attestation\Models\AttestationDataS
                 erviceCmdletBase.cs:line 30
                    at Microsoft.Azure.Commands.Attestation.SetAzureAttestationPolicy.ExecuteCmdlet() in C:\myWorkingDi
                 rectory\azure-powershell\src\Attestation\Attestation\Commands\SetAzureAttestationPolicy.cs:line 74
                    at Microsoft.WindowsAzure.Commands.Utilities.Common.CmdletExtensions.<>c__3`1.<ExecuteSynchronously
                 OrAsJob>b__3_0(T c)
                    at
                 Microsoft.WindowsAzure.Commands.Utilities.Common.CmdletExtensions.ExecuteSynchronouslyOrAsJob[T](T
                 cmdlet, Action`1 executor)
                    at
                 Microsoft.WindowsAzure.Commands.Utilities.Common.CmdletExtensions.ExecuteSynchronouslyOrAsJob[T](T
                 cmdlet)
                    at Microsoft.WindowsAzure.Commands.Utilities.Common.AzurePSCmdlet.ProcessRecord()
Exception      : System.ArgumentException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 5

Message        : Failed to acquire token silently as no token was found in the cache. Call method AcquireToken:
                 AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in
                 the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not
                 been installed by the administrator of the tenant or consented to by any user in the tenant. You
                 might have sent your authentication request to the wrong tenant.
                 Trace ID: 40d73e2d-da26-48e2-b863-1c0d43941500
                 Correlation ID: a5e1072b-e186-4abe-a34c-45725b3a29fa
                 Timestamp: 2020-01-16 22:27:46Z
StackTrace     :    at Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.AcquireToken(AdalConfiguration
                 config, Action`1 promptAction, String userId, SecureString password, Boolean renew) in C:\myWorkingDir
                 ectory\azure-powershell\src\Accounts\Authentication\Authentication\UserTokenProvider.Netcore.cs:line
                 137
                    at
                 Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.GetAccessToken(AdalConfiguration
                 config, String promptBehavior, Action`1 promptAction, String userId, SecureString password, String
                 credentialType) in C:\myWorkingDirectory\azure-powershell\src\Accounts\Authentication\Authentication\U
                 serTokenProvider.Netcore.cs:line 48
                    at
                 Microsoft.Azure.Commands.Common.Authentication.AdalTokenProvider.GetAccessToken(AdalConfiguration
                 config, String promptBehavior, Action`1 promptAction, String userId, SecureString password, String
                 credentialType) in C:\myWorkingDirectory\azure-powershell\src\Accounts\Authentication\Authentication\A
                 dalTokenProvider.cs:line 110
                    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.Authenticate(IAzu
                 reAccount account, IAzureEnvironment environment, String tenant, SecureString password, String
                 promptBehavior, Action`1 promptAction, IAzureTokenCache tokenCache, String resourceId) in C:\myWorking
                 Directory\azure-powershell\src\Accounts\Authentication\Factories\AuthenticationFactory.cs:line 166
                    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.Authenticate(IAzu
                 reAccount account, IAzureEnvironment environment, String tenant, SecureString password, String
                 promptBehavior, Action`1 promptAction, String resourceId) in C:\myWorkingDirectory\azure-powershell\sr
                 c\Accounts\Authentication\Factories\AuthenticationFactory.cs:line 182
                    at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.GetServiceClientC
                 redentials(IAzureContext context, String targetEndpoint) in C:\myWorkingDirectory\azure-powershell\src
                 \Accounts\Authentication\Factories\AuthenticationFactory.cs:line 357
Exception      : Microsoft.Azure.Commands.Common.Authentication.AadAuthenticationFailedException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 5

Message        : Failed to acquire token silently as no token was found in the cache. Call method AcquireToken
StackTrace     :    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenSilentHandler.SendTok
                 enRequestAsync()
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.CheckAndA
                 cquireTokenUsingBrokerAsync()
                    at
                 Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RunAsync()
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext.AcquireTokenSilentCommonAs
                 ync(String resource, ClientKey clientKey, UserIdentifier userId, IPlatformParameters parameters)
                    at
                 Microsoft.IdentityModel.Clients.ActiveDirectory.AuthenticationContext.AcquireTokenSilentAsync(String
                 resource, String clientId, UserIdentifier userId)
                    at
                 Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.DoAcquireToken(AdalConfiguration
                 config, String userId, SecureString password, Action`1 promptAction, Boolean renew) in C:\myWorkingDir
                 ectory\azure-powershell\src\Accounts\Authentication\Authentication\UserTokenProvider.Netcore.cs:line
                 206
                    at
                 Microsoft.Azure.Commands.Common.Authentication.UserTokenProvider.SafeAquireToken(AdalConfiguration
                 config, Action`1 promptAction, String userId, SecureString password, Exception& ex) in C:\myWorkingDir
                 ectory\azure-powershell\src\Accounts\Authentication\Authentication\UserTokenProvider.Netcore.cs:line
                 151
Exception      : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalSilentTokenAcquisitionException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 5

Message        : AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in
                 the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not
                 been installed by the administrator of the tenant or consented to by any user in the tenant. You
                 might have sent your authentication request to the wrong tenant.
                 Trace ID: 40d73e2d-da26-48e2-b863-1c0d43941500
                 Correlation ID: a5e1072b-e186-4abe-a34c-45725b3a29fa
                 Timestamp: 2020-01-16 22:27:46Z
StackTrace     :    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T]
                 (Boolean respondToDeviceAuthChallenge)
                    at
                 Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T]()
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendHttpM
                 essageAsync(IRequestParameters requestParameters)
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendToken
                 RequestByRefreshTokenAsync(String refreshToken)
                    at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RefreshAc
                 cessTokenAsync(AuthenticationResultEx result)
Exception      : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalServiceException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 5

Message        : Response status code does not indicate success: 400 (BadRequest).
StackTrace     :
Exception      : System.Net.Http.HttpRequestException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 5

Message        : {"error":"invalid_resource","error_description":"AADSTS500011: The resource principal named
                 AzureAttestationServiceEndpointResourceId was not found in the tenant named
                 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not been installed by
                 the administrator of the tenant or consented to by any user in the tenant. You might have sent your
                 authentication request to the wrong tenant.\r\nTrace ID:
                 40d73e2d-da26-48e2-b863-1c0d43941500\r\nCorrelation ID:
                 a5e1072b-e186-4abe-a34c-45725b3a29fa\r\nTimestamp: 2020-01-16
                 22:27:46Z","error_codes":[500011],"timestamp":"2020-01-16 22:27:46Z","trace_id":"40d73e2d-da26-48e2-b8
                 63-1c0d43941500","correlation_id":"a5e1072b-e186-4abe-a34c-45725b3a29fa","error_uri":"https://login.mi
                 crosoftonline.com/error?code=500011"}: Unknown error
StackTrace     :
Exception      : Microsoft.IdentityModel.Clients.ActiveDirectory.AdalException
InvocationInfo : {Set-AzAttestationPolicy}
Line           : Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
Position       : At line:1 char:1
                 + Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
                 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId      : 5

[msJinLei]

Set $DebugPreference='Continue'

Cannot see the http request here.

Please check $DebugPreference in your powershell console.

PS C:\Users\leijin> $DebugPreference='Continue'
PS C:\Users\leijin> $DebugPreference
Continue

[shleiAmy]

@msJinLei

PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
DEBUG: 5:08:04 PM - SetAzureAttestationPolicy begin processing with ParameterSet '__AllParameterSets'.
DEBUG: 5:08:04 PM - using account id 'shlei@microsoft.com'...
DEBUG: [Common.Authentication]: Authenticating using Account: 'shlei@microsoft.com', environment: 'AzureCloud', tenant: '72f988bf-86f1-41af-91ab-2d7cd011db47'
DEBUG: [Common.Authentication]: Authenticating using configuration values: Domain: '72f988bf-86f1-41af-91ab-2d7cd011db47', Endpoint: 'https://login.microsoftonline.com/', ClientId: '1950a258-227b-4e31-a9cf-717495945fc2', ClientRedirect: 'urn:ietf:wg:oauth:2.0:oob', ResourceClientUri: 'AzureAttestationServiceEndpointResourceId', ValidateAuthority: 'True'
DEBUG: [Common.Authentication]: Acquiring token using context with Authority 'https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/', CorrelationId: '00000000-0000-0000-0000-000000000000', ValidateAuthority: 'True'
DEBUG: [Common.Authentication]: Acquiring token using AdalConfiguration with Domain: '72f988bf-86f1-41af-91ab-2d7cd011db47', AdEndpoint: 'https://login.microsoftonline.com/', ClientId: '1950a258-227b-4e31-a9cf-717495945fc2', ClientRedirectUri: urn:ietf:wg:oauth:2.0:oob
DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7122324Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: ADAL PCL.CoreCLR with assembly version '3.19.2.6005', file version '3.19.50302.0130' and informational version '2a8bec6c4c76d0c1ef819b55bdc3cda2d2605056' is running...

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7140939Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: ADAL PCL.CoreCLR with assembly version '3.19.2.6005', file version '3.19.50302.0130' and informational version '2a8bec6c4c76d0c1ef819b55bdc3cda2d2605056' is running...

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7155807Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: === Token Acquisition started:
        CacheType: null
        Authentication Target: User
        , Authority Host: login.microsoftonline.com

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7166750Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: === Token Acquisition started:
        Authority: https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/
        Resource: AzureAttestationServiceEndpointResourceId
        ClientId: 1950a258-227b-4e31-a9cf-717495945fc2
        CacheType: null
        Authentication Target: User


DEBUG: [ADAL]: Verbose: 2020-01-22T01:08:04.7178201Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Loading from cache.

DEBUG: [ADAL]: Verbose: 2020-01-22T01:08:04.7186975Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Loading from cache.

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7200253Z: 00000000-0000-0000-0000-000000000000 - LoggerBase.cs: Deserialized 2 items to token cache.

DEBUG: [ADAL]: Verbose: 2020-01-22T01:08:04.7209390Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Looking up cache for a token...

DEBUG: [ADAL]: Verbose: 2020-01-22T01:08:04.7218055Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Looking up cache for a token...

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7230756Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: A Multi Resource Refresh Token for a different resource was found which can be used

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7239691Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: A Multi Resource Refresh Token for a different resource was found which can be used

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7248749Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Multi resource refresh token for resource 'https://management.core.windows.net/' will be used to acquire token for 'AzureAttestationServiceEndpointResourceId'

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7259065Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: A matching item (access token or refresh token or both) was found in the cache

DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7268282Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: A matching item (access token or refresh token or both) was found in the cache

DEBUG: [ADAL]: Verbose: 2020-01-22T01:08:04.7277202Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Refreshing access token...

DEBUG: [ADAL]: Verbose: 2020-01-22T01:08:04.7286108Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Refreshing access token...

DEBUG: [ADAL]: Error: 2020-01-22T01:08:09.6892952Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Exception type: Microsoft.IdentityModel.Clients.ActiveDirectory.AdalSilentTokenAcquisitionException, ErrorCode: failed_to_acquire_token_silently ---> Exception type: Microsoft.IdentityModel.Clients.ActiveDirectory.AdalServiceException, ErrorCode: invalid_resource, StatusCode: 400 ---> Exception type: System.Net.Http.HttpRequestException ---> Exception type: Microsoft.IdentityModel.Clients.ActiveDirectory.AdalException, ErrorCode: {"error":"invalid_resource","error_description":"AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.\r\nTrace ID: e255f290-54e6-4e7a-8761-e20131ac0500\r\nCorrelation ID: 065159d2-ddf9-4075-8aa1-ee479011c7bc\r\nTimestamp: 2020-01-22 01:08:06Z","error_codes":[500011],"timestamp":"2020-01-22 01:08:06Z","trace_id":"e255f290-54e6-4e7a-8761-e20131ac0500","correlation_id":"065159d2-ddf9-4075-8aa1-ee479011c7bc","error_uri":"https://login.microsoftonline.com/error?code=500011"}
--- End of inner exception stack trace ---
--- End of inner exception stack trace ---
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T](Boolean respondToDeviceAuthChallenge)
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T]()
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendHttpMessageAsync(IRequestParameters requestParameters)
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendTokenRequestByRefreshTokenAsync(String refreshToken)
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RefreshAccessTokenAsync(AuthenticationResultEx result)
--- End of inner exception stack trace ---
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenSilentHandler.SendTokenRequestAsync()
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.CheckAndAcquireTokenUsingBrokerAsync()
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RunAsync()

DEBUG: [ADAL]: Error: 2020-01-22T01:08:09.6933523Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: Microsoft.IdentityModel.Clients.ActiveDirectory.AdalSilentTokenAcquisitionException: Failed to acquire token silently as no token was found in the cache. Call method AcquireToken ---> Microsoft.IdentityModel.Clients.ActiveDirectory.AdalServiceException: AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
Trace ID: e255f290-54e6-4e7a-8761-e20131ac0500
Correlation ID: 065159d2-ddf9-4075-8aa1-ee479011c7bc
Timestamp: 2020-01-22 01:08:06Z ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 400 (BadRequest). ---> Microsoft.IdentityModel.Clients.ActiveDirectory.AdalException: {"error":"invalid_resource","error_description":"AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.\r\nTrace ID: e255f290-54e6-4e7a-8761-e20131ac0500\r\nCorrelation ID: 065159d2-ddf9-4075-8aa1-ee479011c7bc\r\nTimestamp: 2020-01-22 01:08:06Z","error_codes":[500011],"timestamp":"2020-01-22 01:08:06Z","trace_id":"e255f290-54e6-4e7a-8761-e20131ac0500","correlation_id":"065159d2-ddf9-4075-8aa1-ee479011c7bc","error_uri":"https://login.microsoftonline.com/error?code=500011"}: Unknown error
   --- End of inner exception stack trace ---
   --- End of inner exception stack trace ---
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T](Boolean respondToDeviceAuthChallenge)
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.GetResponseAsync[T]()
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendHttpMessageAsync(IRequestParameters requestParameters)
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.SendTokenRequestByRefreshTokenAsync(String refreshToken)
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RefreshAccessTokenAsync(AuthenticationResultEx result)
   --- End of inner exception stack trace ---
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenSilentHandler.SendTokenRequestAsync()
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.CheckAndAcquireTokenUsingBrokerAsync()
   at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Flows.AcquireTokenHandlerBase.RunAsync()
        ErrorCode: failed_to_acquire_token_silently

DEBUG: [Common.Authentication]: Received exception Failed to acquire token silently as no token was found in the cache. Call method AcquireToken: AADSTS500011: The resource principal named AzureAttestationServiceEndpointResourceId was not found in the tenant named 72f988bf-86f1-41af-91ab-2d7cd011db47. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
Trace ID: e255f290-54e6-4e7a-8761-e20131ac0500
Correlation ID: 065159d2-ddf9-4075-8aa1-ee479011c7bc
Timestamp: 2020-01-22 01:08:06Z, while authenticating.
Set-AzAttestationPolicy : Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials.
At line:1 char:1
+ Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -At ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : CloseError: (:) [Set-AzAttestationPolicy], ArgumentException
+ FullyQualifiedErrorId : Microsoft.Azure.Commands.Attestation.SetAzureAttestationPolicy

DEBUG: 5:08:10 PM - SetAzureAttestationPolicy end processing.
DEBUG: 5:08:10 PM - SetAzureAttestationPolicy end processing.

[msJinLei]

@shleiAmy

• First thing

PS C:\myWorkingDirectory\azure-powershell\artifacts\Debug\Az.Attestation> Set-AzAttestationPolicy -Name "dataplane12test" -Tee "SgxEnclave" -AttestationPolicy $jws
DEBUG: 5:08:04 PM - SetAzureAttestationPolicy begin processing with ParameterSet '__AllParameterSets'.
DEBUG: [ADAL]: Information: 2020-01-22T01:08:04.7166750Z: 065159d2-ddf9-4075-8aa1-ee479011c7bc - LoggerBase.cs: === Token Acquisition started:
Authority: https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/
Resource: AzureAttestationServiceEndpointResourceId
ClientId: 1950a258-227b-4e31-a9cf-717495945fc2
CacheType: null
Authentication Target: User

Please provide the information how do you call the following method your in data server authentication

        IAccessToken Authenticate(IAzureAccount account, IAzureEnvironment environment, string tenant, SecureString password, string promptBehavior, Action<string> promptAction, IAzureTokenCache tokenCache, string resourceId = "ActiveDirectoryServiceEndpointResourceId");

or
        IAccessToken Authenticate(IAzureAccount account, IAzureEnvironment environment, string tenant, SecureString password, string promptBehavior, Action<string> promptAction, string resourceId = "ActiveDirectoryServiceEndpointResourceId");

Especially pay attention to where "environment" comes from.

• Secondly
  I have checked that your endpoint "AzureAttestationServiceEndpointResourceId" is managed to be retrieved from the latest "Microsoft.Azure.PowerShell.Authentication.Abstractions.dll"
  Please ensure that you use latest version of this dll.
  One way to check is to open folder where you import Az.Accounts module from and check the build time of this file.

[shleiAmy]

@msJinLei Here is the function that creates ServiceClientCredentials.
I think AzureSession.Instance.AuthenticationFactory.GetServiceClientCredentials will eventually call Authenticate functions in Microsoft.Azure.PowerShell.Authentication.Abstractions library.

I have checked the context.Environment , which doesn't contain AzureAttestationServiceEndpointResourceId

    public AttestationDataServiceClient(IAuthenticationFactory authFactory, IAzureContext context)
    {
        if (authFactory == null)
            throw new ArgumentNullException(nameof(authFactory));
        if (context == null)
            throw new ArgumentNullException(nameof(context));
        if (context.Environment == null)
            throw new ArgumentException("Invalid Azure Environment");

        ServiceClientCredentials clientCredentials =  AzureSession.Instance.AuthenticationFactory.GetServiceClientCredentials(context, AzureEnvironment.ExtendedEndpoint.AzureAttestationServiceEndpointResourceId);
        attestationDataClient = AzureSession.Instance.ClientFactory.CreateCustomArmClient<AttestationClient>(clientCredentials);
        string suffix = context.Environment.GetEndpoint(AzureEnvironment.ExtendedEndpoint.AzureAttestationServiceEndpointSuffix);
        this.tenantUriHelper = new TenantUriHelper(suffix);
    }

I delete everything from artifacts directory and then rebuild the project.
Under azure-powershell\artifacts\Debug\Az.Accounts folder, I see
Microsoft.Azure.PowerShell.Authentication.Abstractions.dll has date modified 1/15/2020

[gkostal]

@shleiAmy

Can you use look at the version and contents of the Microsfot.Azure.PowerShell.Authentication.Abstractions.dll in your folder? I synced with your forked repo, rebuilt and have the same DLL on my machine:

When I examine the contents using dotPeek, I see that the AzureEnvironment class doesn't have the AzureAttestation data members:

The only instances of the string "Attest" in the DLL is for a couple constant values: