Unauthorized Client Error in Office-Add-in-NodeJS-SSO Sample When Trying to Get OneDrive File Names

[CodeWithAbuBakr]

Title: unauthorized_client error in Office-Add-in-NodeJS-SSO sample when clicking "Get OneDrive File Names" button

Provide required information needed to triage your issue
Your Environment
Platform: PC desktop

Host: Excel

Office version number: Microsoft 365 Version 2406 (Build 17726.20126)

Operating System: Windows 10

Browser (if using Office on the web): N/A

Expected behavior
Clicking "Get OneDrive File Names" should authenticate the user and display a list of filenames from their OneDrive account.

Current behavior:

Instead of retrieving the file names, a dialog appears with the following error message:
"unauthorized_client: The client does not exist or is not enabled for consumers.
If you are the application developer, configure a new application through the
App Registrations in the Azure Portal at https://go.microsoft.com/fwlink/?linkid=2083908."

Steps to reproduce
1: Clone the sample repo: https://github.com/OfficeDev/Office-Add-in-samples/tree/main/Samples/auth/Office-Add-in-NodeJS-SSO

2: Set up the .env file with the following values (masked sensitive info):

CLIENT_ID=#####################
CLIENT_SECRET=#####################
NODE_ENV=development
SERVER_SOURCE=https://localhost:3000
TENANT_ID=#####################
REDIRECT_URI=https://localhost:3000/auth/callback
SCOPES=User.Read Files.Read

3. Install dependencies and run the Node.js server

4. Sideload the manifest in Excel (using a shared folder)

5. Launch the add-in and click "Get OneDrive File Names"

6. Office dialog opens and shows the unauthorized_client error

Link to live example(s)
N/A – this issue is from a local setup using the official sample

Provide additional details
Azure app registration was completed

Redirect URI https://localhost:3000/auth/callback is added under platform "Web"

API permissions for User.Read and Files.Read are granted with admin consent

Application type is set to “Accounts in this organizational directory only (Single tenant)”

Context
I’m evaluating the Office-Add-in SSO flow for a production Excel add-in. This error blocks the flow after clicking the OneDrive button, so I can’t complete SSO or test file access.

Useful logs
Console errors (from Office dialog):
unauthorized_client: The client does not exist or is not enabled for consumers.

Screenshot: (Attached when creating GitHub issue)

Test file: N/A

[github-actions]

Regression Analysis Needs Your Input

Our automated system analyzed this issue but couldn't determine with confidence if this is a regression bug.

A regression bug is when functionality that previously worked properly no longer works after a recent change.

If you believe this is a regression issue, please confirm below:

• Yes, confirm this is a regression issue

Note: Once confirmed, the issue will be labeled as regression.
After selecting the option, your choice will be automatically processed.

---

[CodeWithAbuBakr]

Regression Analysis Needs Your Input

Our automated system analyzed this issue but couldn't determine with confidence if this is a regression bug.

A regression bug is when functionality that previously worked properly no longer works after a recent change.

If you believe this is a regression issue, please confirm below:

• Yes, confirm this is a regression issue

Note: Once confirmed, the issue will be labeled as regression.
After selecting the option, your choice will be automatically processed.

No, this is not a regression issue.
I’m testing the sample for the first time, so I cannot confirm if it previously worked and has now stopped working. This may be a configuration-related issue or a gap in documentation rather than a regression from a recent change.

[samantharamon]

Hi @CodeWithAbuBakr,

Thanks for reaching out. We're sorry to hear you're running into an error while testing one of the samples.

@davidchesnut, is this something you can help with?

[CodeWithAbuBakr]

Hi @CodeWithAbuBakr,

Thanks for reaching out. We're sorry to hear you're running into an error while testing one of the samples.

@davidchesnut, is this something you can help with?

Waiting....

[davidchesnut]

Hi @CodeWithAbuBakr, what type of account are you signing in with? Looks like it might be a consumer account (like outlook.com) which isn't supported with Office.js SSO. Consumer accounts are supported with MSAL NAA SSO Enable single sign-on in an Office Add-in with nested app authentication.

Thanks,
David

[microsoft-github-policy-service]

This issue has been automatically marked as stale because it is marked as needing author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment. Thank you for your interest in Office Add-ins!