Auth issue with powershell module

[NickVH-MS]

Description

I updated to the latest powershell module
https://learn.microsoft.com/en-us/powershell/azure/authenticate-interactive?view=azps-13.5.0#login-experience

1. Connect-AzAccount -devicecode -Tenantid "72f988bf-86f1-41af-91ab-2d7cd011db47"

2) Set-AzVmExtension -ResourceGroupName nverhoe-dev -VMName nverhoe-al2_35fee6dd -Name "Microsoft.Azure.FleetDiagnostics" -Publisher "Microsoft.Azure.FleetDiagnostics.Dev" -Type "FleetDiagnosticsForLinux" -TypeHandlerVersion 2.16 -EnableAutomaticUpgrade $False -SettingString "{}" Set-AzVMExtension: Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials. Authentication failed against tenant 72f988bf-86f1-41af-91ab-2d7cd011db47. User interaction is required. This may be due to the conditional access policy settings such as multi-factor authentication (MFA). If you need to access subscriptions in that tenant, please rerun 'Connect-AzAccount' with additional parameter '-TenantId 72f988bf-86f1-41af-91ab-2d7cd011db47'.

Logging in again does not help.

This error is not seen in the cloud shell.

Issue script & Debug output

Set-AzVmExtension -ResourceGroupName nverhoe-dev -VMName nverhoe-al2_35fee6dd -Name "Microsoft.Azure.FleetDiagnostics" -Publisher "Microsoft.Azure.FleetDiagnostics.Dev" -Type "FleetDiagnosticsForLinux" -TypeHandlerVersion 2.16 -EnableAutomaticUpgrade $False -SettingString "{}"
DEBUG: 3:55:50 PM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 3:55:50 PM - SetAzureVMExtensionCommand begin processing with ParameterSet 'SettingString'.
DEBUG: 3:55:50 PM - using account id 'nverhoe@microsoft.com'...
DEBUG: 3:55:50 PM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: [Common.Authentication]: Authenticating using Account: 'nverhoe@microsoft.com', environment: 'AzureCloud', tenant: '72f988bf-86f1-41af-91ab-2d7cd011db47'
DEBUG: 3:55:50 PM - [ConfigManager] Got nothing from [DisableInstanceDiscovery], Module = [], Cmdlet = []. Returning default value [False].
DEBUG: 3:55:50 PM - [ConfigManager] Got nothing from [EnableLoginByWam], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 3:55:50 PM - [SilentAuthenticator] Calling SharedTokenCacheCredential.GetTokenAsync - TenantId:'72f988bf-86f1-41af-91ab-2d7cd011db47', Scopes:'https://management.core.windows.net//.default', AuthorityHost:'https://login.microsoftonline.com/', UserId:'nverhoe@microsoft.com'
DEBUG: SharedTokenCacheCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - f4c586dc-894c-4ec2-8bdd-bbcb332a685e] IsLegacyAdalCacheEnabled: yes
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - f4c586dc-894c-4ec2-8bdd-bbcb332a685e] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - f4c586dc-894c-4ec2-8bdd-bbcb332a685e] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - f4c586dc-894c-4ec2-8bdd-bbcb332a685e] IsLegacyAdalCacheEnabled: yes
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - f4c586dc-894c-4ec2-8bdd-bbcb332a685e] IsLegacyAdalCacheEnabled: yes
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [Runtime] WAM supported OS.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [RuntimeBroker] ListWindowsWorkAndSchoolAccounts option was not enabled.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - 9bb463fa-13b7-42c0-b9a3-95aa6bcb5b84] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] Found 1 cache accounts and 0 broker accounts
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] Returning 1 accounts
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] MSAL MSAL.CoreCLR with assembly version '4.60.3.0'. CorrelationId(be74571f-8566-422c-8efb-35549388cdbd)
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] === AcquireTokenSilent Parameters ===
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] LoginHint provided: False
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] Account provided: True
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] ForceRefresh: False
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - be74571f-8566-422c-8efb-35549388cdbd
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] === Token Acquisition (SilentRequest) started:
         Scopes: https://management.core.windows.net//.default
        Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] Broker is configured and enabled, attempting to use broker instead.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [Runtime] WAM supported OS.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z - be74571f-8566-422c-8efb-35549388cdbd] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0001]      WARNING SetAuthorityString:98   Initializing authority from string 'https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/' without authority type, defaulting to MsSts
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:393    Printing Telemetry for Correlation ID: be74571f-8566-422c-8efb-35549388cdbd
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: start_time, Value: 2025-05-06T22:55:50.000Z
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: api_name, Value: ReadAccountById
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: correlation_id, Value: be74571f-8566-422c-8efb-35549388cdbd
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: broker_app_used, Value: false
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: stop_time, Value: 2025-05-06T22:55:50.000Z
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: is_successful, Value: true
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    LogTelemetryData:401    Key: request_duration, Value: 0
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    SetCorrelationId:273    Set correlation ID: be74571f-8566-422c-8efb-35549388cdbd
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    EnqueueBackgroundRequest:952    The original authority is 'https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47'
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    ModifyAndValidateAuthParameters:191     Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0037]      INFO    ModifyAndValidateAuthParameters:215     Authority Realm: 72f988bf-86f1-41af-91ab-2d7cd011db47
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0003]      INFO    StorageTokenResponse:84 StorageTokenResponse account constructor invoked. This is only expected in Runtime flows
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0003]      WARNING DiscardAccessAndIdTokensIfUnusable:808  No access token found in the cache
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0003]      WARNING StorageTokenResponse:15 No credentials found in the cache
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:50Z] [MSAL:0003]      WARNING GetPlatformPropertiesFromStorage:2014   No account found in cache.
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      ERROR   ErrorInternalImpl:134   Created an error: 7q6cn, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 3399614476, Context '(pii)'
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:393    Printing Telemetry for Correlation ID: be74571f-8566-422c-8efb-35549388cdbd
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: start_time, Value: 2025-05-06T22:55:50.000Z
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: api_name, Value: AcquireTokenSilently
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: authority_type, Value: AAD
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: read_token, Value: ID
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: api_status_code, Value: StatusInternal::InteractionRequired
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: client_id, Value: 1950a258-227b-4e31-a9cf-717495945fc2
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: correlation_id, Value: be74571f-8566-422c-8efb-35549388cdbd
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: broker_app_used, Value: true
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: stop_time, Value: 2025-05-06T22:55:51.000Z
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: all_error_tags, Value: 7q6cn|7q6cn
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: original_authority, Value: https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: additional_query_parameters_count, Value: 1
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: storage_read, Value: DAC|DID|DAMD
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: is_successful, Value: false
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: api_error_tag, Value: 7q6cn
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: server_suberror_code, Value: basic_action
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: wam_telemetry, Value: {"x_ms_clitelem":"1,50076,0,3329661.7324,","ui_visible":false,"server_sub_code":"basic_action","server_error_code":50076,"scope":"https://management.core.windows.net//.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/1950a258-227b-4e31-a9cf-717495945fc2","provider_id":"https://login.windows.net","oauth_error_code":"interaction_required","http_status":400,"http_event_count":1,"http_content_type":"application/json; charset=utf-8","http_content_size":688,"device_join":"aadj","correlation_id":"{be74571f-8566-422c-8efb-35549388cdbd}","client_id":"1950a258-227b-4e31-a9cf-717495945fc2","ccs_failover_v2":"1.P","cache_event_count":0,"broker_version":"10.0.26100.3624","authority":"https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47","api_error_code":-895352820,"account_join_on_start":"primary","account_join_on_end":"primary","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":0,"is_cached":0}
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: broker_error_location, Value: 7q6cn
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: api_error_code, Value: 3399614476
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: api_error_context, Value: (pii)
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: authorization_type, Value: WindowsIntegratedAuth
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:401    Key: request_duration, Value: 1180
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:406    Printing Execution Flow:
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [MSAL:0003]      INFO    LogTelemetryData:414    {"t":"4s7uc","tid":37,"ts":0,"l":2},{"t":"4sufd","tid":37,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":37,"ts":0,"s":29,"l":2},{"t":"4swgf","tid":37,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":0,"s":29,"l":2},{"t":"8b2yn","tid":3,"ts":0,"l":2},{"t":"8dqkx","tid":3,"ts":0,"l":2},{"t":"8dqik","tid":3,"ts":0,"l":2},{"t":"4q2di","tid":3,"ts":0,"l":2},{"t":"4qnng","tid":3,"ts":0,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":3,"ts":1,"l":2},{"t":"8b2ht","tid":3,"ts":1,"l":2},{"t":"4qnno","tid":3,"ts":1,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":5,"l":2,"a":2,"ie":1},{"t":"8dqir","tid":3,"ts":5,"l":2},{"t":"4qwi1","tid":3,"ts":5,"l":2},{"t":"4qnna","tid":3,"ts":5,"l":2,"a":2,"ie":0},{"t":"4qnm9","tid":3,"ts":5,"l":2,"a":2,"ie":1},{"t":"8dqin","tid":3,"ts":5,"l":2},{"t":"4qnno","tid":3,"ts":5,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":5,"l":2,"a":2,"ie":1},{"t":"8b2hu","tid":3,"ts":5,"l":2},{"t":"5b8fg","tid":3,"ts":7,"l":2},{"t":"8dqk0","tid":3,"ts":7,"l":2},{"t":"4qnng","tid":3,"ts":7,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":7,"l":2,"a":2,"ie":1},{"t":"8dqjd","tid":3,"ts":7,"l":2},{"t":"694nj","tid":3,"ts":7,"l":2,"a":10,"ie":0},{"t":"4vw1f","tid":3,"ts":7,"l":2},{"t":"4wqnh","tid":3,"ts":7,"l":2},{"t":"4vw1c","tid":3,"ts":9,"l":2},{"t":"4vw1b","tid":3,"ts":9,"l":2},{"t":"4wqnk","tid":3,"ts":9,"l":2},{"t":"6omfm","tid":3,"ts":13,"l":2},{"t":"4vw1a","tid":3,"ts":13,"l":2},{"t":"4wqnf","tid":3,"ts":13,"l":2},{"t":"4wqm5","tid":3,"ts":17,"l":2},{"t":"4wqm6","tid":3,"ts":17,"l":2},{"t":"4u9jc","tid":3,"ts":1180,"l":2},{"t":"58yep","tid":3,"ts":1181,"l":2},{"t":"694nk","tid":3,"ts":1181,"l":2,"a":10,"ie":1},{"t":"8dqk1","tid":3,"ts":1181,"l":2},{"t":"646u1","tid":3,"ts":1181,"l":2}
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [RuntimeBroker] Could not acquire token silently. Status: InteractionRequired
Error: 0xcaa2000c
Context: (pii)
Tag: 0x2142008d
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [RuntimeBroker] Processing WAM exception
DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z] [RuntimeBroker] failed_to_acquire_token_silently_from_broker WAM Error
 Error Code: 3399614476
 Error Message: (pii)
 Internal Error Code: 557973645

DEBUG: False MSAL 4.60.3.0 MSAL.CoreCLR .NET 9.0.4 Microsoft Windows 10.0.26100 [2025-05-06 22:55:51Z - be74571f-8566-422c-8efb-35549388cdbd] Exception type: Microsoft.Identity.Client.MsalUiRequiredException
, ErrorCode: failed_to_acquire_token_silently_from_broker
HTTP StatusCode 0
CorrelationId be74571f-8566-422c-8efb-35549388cdbd
To see full exception details, enable PII Logging. See https://aka.ms/msal-net-logging
   at Microsoft.Identity.Client.Internal.Requests.Silent.SilentRequest.ExecuteAsync(CancellationToken cancellationToken)
   at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<<RunAsync>b__1>d.MoveNext()
--- End of stack trace from previous location ---
   at Microsoft.Identity.Client.Utils.StopwatchService.MeasureCodeBlockAsync(Func`1 codeBlock)
   at Microsoft.Identity.Client.Internal.Requests.RequestBase.RunAsync(CancellationToken cancellationToken)

DEBUG: SharedTokenCacheCredential.GetToken was unable to retrieve an access token. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:  Exception: Azure.Identity.CredentialUnavailableException (0x80131500): SharedTokenCacheCredential authentication unavailable. Token acquisition failed for user nverhoe@microsoft.com. Ensure that you have authenticated with a developer tool that supports Azure single sign on.
 ---> Microsoft.Identity.Client.MsalUiRequiredException (0x80131500): WAM Error
 Error Code: 3399614476
 Error Message: (pii)
 Internal Error Code: 557973645

DEBUG: [Common.Authentication]: Received exception Authentication failed against tenant 72f988bf-86f1-41af-91ab-2d7cd011db47. User interaction is required. This may be due to the conditional access policy settings such as multi-factor authentication (MFA). If you need to access subscriptions in that tenant, please rerun 'Connect-AzAccount' with additional parameter '-TenantId 72f988bf-86f1-41af-91ab-2d7cd011db47'., while authenticating.
DEBUG: 3:55:51 PM - [ConfigManager] Got nothing from [EnableErrorRecordsPersistence], Module = [], Cmdlet = []. Returning default value [False].
Set-AzVMExtension: Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials.
Authentication failed against tenant 72f988bf-86f1-41af-91ab-2d7cd011db47. User interaction is required. This may be due to the conditional access policy settings such as multi-factor authentication (MFA). If you need to access subscriptions in that tenant, please rerun 'Connect-AzAccount' with additional parameter '-TenantId 72f988bf-86f1-41af-91ab-2d7cd011db47'.
DEBUG: 3:55:51 PM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 3:55:51 PM - [ConfigManager] Got nothing from [DisplayRegionIdentified], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 3:55:51 PM - [ConfigManager] Got nothing from [CheckForUpgrade], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: AzureQoSEvent:  Module: Az.Compute:8.0.0; CommandName: Set-AzVMExtension; PSVersion: 7.5.1; IsSuccess: False; Duration: 00:00:01.2394754; SanitizeDuration: 00:00:00; Exception: Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials.
Authentication failed against tenant 72f988bf-86f1-41af-91ab-2d7cd011db47. User interaction is required. This may be due to the conditional access policy settings such as multi-factor authentication (MFA). If you need to access subscriptions in that tenant, please rerun 'Connect-AzAccount' with additional parameter '-TenantId 72f988bf-86f1-41af-91ab-2d7cd011db47'.;
DEBUG: 3:55:51 PM - [ConfigManager] Got nothing from [EnableDataCollection], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 3:55:51 PM - SetAzureVMExtensionCommand end processing.

Environment data

PS C:\Users\nverhoe> get-module az*

ModuleType Version    PreRelease Name                                ExportedCommands
---------- -------    ---------- ----                                ----------------
Script     3.0.0                 Az.Accounts                         {Add-AzEnvironment, Clear-AzConfig, Clear-AzContext, Clear-AzDefault…}
Script     8.0.0                 Az.Compute                          {Add-AzImageDataDisk, Add-AzVhd, Add-AzVMAdditionalUnattendContent, Add-AzVMDataDisk…}

Module versions

$Psversiontable

Name                           Value
----                           -----
PSVersion                      7.5.1
PSEdition                      Core
GitCommitId                    7.5.1
OS                             Microsoft Windows 10.0.26100
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Error output

test

[NickVH-MS]

Note that the bug could not be created with Error output populated. It just says "failed to create issue" making it difficult to file the bug! The output is very long.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967
• "Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials" when passing Azure context to Start-Job #9448

---

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Solution 1:

Run this before Connect Az account to resolve the issue: Update-AzConfig -EnableLoginByWam $false. This workaround has been confirmed to solve the problem by multiple users.

Reference:

• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)
• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)
• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)
• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)
• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)
• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)

Solution 2:

For some users, using -EnableLoginByWam $false did not fix the issue until they also used -LoginExperienceV2 Off.

Reference:

• Account selection window pops up after Connect-AzAccount fails with "user canceled authentication" #24967 (comment)

Powered by issue-sentinel

[msJinLei]

@NickVH-MS it is a known issue of Az.Accounts 3.0.0. Please upgrade to the latest version to solve the issue.

[microsoft-github-policy-service]

Hi, we're sending this friendly reminder because we haven't heard back from you in a while. We need more information about this issue to help address it. Please be sure to give us your input within the next 7 days. If we don't hear back from you within 14 days of this comment the issue will be automatically closed. Thank you!