[Connect-MgGraph], AuthenticationFailedException

[patrmur]

Describe the bug

Hi Team,

I am trying to connect to Microsoft Graph using the WAM login flow by enabling LoginByWAM using elevated Powershell as UAC is turned off. However, I get the following error prior to selecting an account:

Connect-MGGraph : InteractiveBrowserCredential authentication failed: User canceled authentication.
At line:1 char:1

• Connect-MGGraph -Scopes "User.read"

•   + CategoryInfo          : NotSpecified: (:) [Connect-MgGraph], AuthenticationFailedException
    + FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph
  
  

Expected behavior

Successful authentication to Microsoft Graph using WAM.

How to reproduce

Install-Module -Name Microsoft.Graph.Authentication -RequiredVersion 2.25.0
Open Powershell with Right Click Run as Administrator or Set "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA to 0" and restart then launch powershell
Set-MgGraphOption -EnableLoginByWAM $true
Ensure device is registered to Entra with account
Connect-MgGraph

### SDK Version

2.25.0

### Latest version known to work for scenario above?

_No response_

### Known Workarounds

Set EnableLUA to 1 and then launch as non-elevated powershell.

### Debug output

Non-Elevated (working)
> Connect-MGGraph -Scopes "User.read" -debug
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.read ] ParentRequestId:

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] MSAL MSAL.Desktop with assembly version '4.61.3.0'.
CorrelationId(648bc988-5d39-4efe-819f-988de99503d5)
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5]
=== Request Data ===
Authority Provided? - True
Scopes - User.read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 648bc988-5d39-4efe-819f-988de99503d5
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] === Token Acquisition (InteractiveRequest) started:
  Scopes: User.read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] Fetching instance discovery from the network from host login.microsoftonline.com.

DEBUG: Request [f3cef0ac-18f0-4353-93c8-4532a58c9a8d] GET
https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
x-ms-client-request-id:f3cef0ac-18f0-4353-93c8-4532a58c9a8d
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity.Broker/1.1.0 (.NET Framework 4.8.9300.0; Microsoft Windows 10.0.22631 )
client assembly: Azure.Identity.Broker
DEBUG: Response [f3cef0ac-18f0-4353-93c8-4532a58c9a8d] 200 OK (00.5s)
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
client-request-id:REDACTED
x-ms-request-id:0c01cb9d-8d51-4a0d-b4d0-4b72bba61200
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
Content-Security-Policy-Report-Only:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:max-age=86400, private
Content-Type:application/json; charset=utf-8
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 02 Jul 2025 17:47:51 GMT
Content-Length:950
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Authority validation enabled? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Authority validation - is known env? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Broker is configured. Starting broker flow without knowing the broker
installation app link.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [Runtime] WAM
supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [RuntimeBroker]
Calling SignInInteractivelyAsync this will show the account picker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0001] WARNING
SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/common/' without authority
type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
SetCorrelationId:273 Set correlation ID: 648bc988-5d39-4efe-819f-988de99503d5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1103 The original authority is 'https://login.microsoftonline.com/common'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] WARNING
TryNormalizeRealm:2421 No HomeAccountId provided to normalize the realm
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1114 The normalized realm is ''
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
ModifyAndValidateAuthParameters:215 Authority Realm: common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0003] WARNING
ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token
reads will fail
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0003] WARNING
ReadAccountById:227 Account id is empty - account not found
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:56Z] [MSAL:0003] INFO
SetCanonicalRealm:1106 Normalize realm to: 'de9231de-45f4-4325-ae07-8ae72052517e'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 648bc988-5d39-4efe-819f-988de99503d5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:52.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: api_name, Value: SignInInteractively
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authority_type, Value: AAD
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: access_token_expiry_time, Value: 2025-07-02T18:51:58.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: correlation_id, Value: 648bc988-5d39-4efe-819f-988de99503d5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: broker_app_used, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: read_token_last_error, Value: missing required parameter
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: ui_event_count, Value: 1
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: wam_telemetry, Value:
{"x_ms_clitelem":"1,0,0,1287225.5794,","ui_visible":false,"tenant_id":"de9231de-45f4-4325-ae07-8ae72052517e","scope":"U
ser.read offline_access openid
profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":"
https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose;
charset=utf-8","http_content_size":13859,"device_join":"haadj","correlation_id":"{648bc988-5d39-4efe-819f-988de99503d5}
","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.22621.5415","authorit
y":"https://login.microsoftonline.com/common","api_error_code":0,"account_join_on_start":"secondary","account_join_on_e
nd":"secodary","account_id":"6a50d794-36a8-455e-a5e-d04ae4910f16","silent_code":0,"silent_bi_sub_code":0,"silent_mess
age":"","silent_mats":{"x_ms_clitelem":"1,0,0,1287225.5794,","ui_visible":false,"tenant_id":"de9231de-45f4-4325-ae07-8a
e72052517e","scope":"User.read offline_access openid
profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":"
https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose;
charset=utf-8","http_content_size":13859,"device_join":"haadj","correlation_id":"{648bc988-5d39-4efe-819f-988de99503d5}
","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.22621.5415","authorit
y":"https://login.microsoftonline.com/common","api_error_code":0,"account_join_on_start":"secondary","account_join_on_e
nd":"secodary","account_id":"6a50d794-36a8-455e-a5e-d04ae4910f16"},"silent_status":0,"is_cached":0}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: tenant_id, Value: de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: normalized_realm, Value: de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: write_token, Value: AT|ID
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: storage_write, Value: DAT|DID|DAC
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: storage_read, Value: DAC
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authorization_type, Value: Interactive
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: request_duration, Value: 4935
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:406 Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:414
{"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":1,"l":2},{"t":"4sufd","tid":2,"ts":1,"s":2,"l":2},{"t":"4s
wgg","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t"
:"8dqim","tid":3,"ts":2,"l":2},{"t":"8dqkl","tid":3,"ts":4,"l":2,"a":9,"ie":0},{"t":"54uxe","tid":2,"ts":5,"l":2},{"t":
"4wqm9","tid":4,"ts":2570,"l":2},{"t":"8dql1","tid":4,"ts":4859,"l":2},{"t":"4qopb","tid":4,"ts":4859,"l":2},{"t":"8dqk
n","tid":4,"ts":4859,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":4859,"l":2,"a":9,"ie":1},{"t":"8dqkr","tid":4,"ts":4
859,"l":2},{"t":"4sufd","tid":4,"ts":4859,"s":2,"l":2},{"t":"4swgg","tid":4,"ts":4859,"s":2,"l":2},{"t":"4swgf","tid":4
,"ts":4859,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":4859,"s":2,"l":2},{"t":"8b2yn","tid":3,"ts":4859,"l":2},{"t":"8dqlh",
"tid":3,"ts":4859,"l":2},{"t":"8dqli","tid":3,"ts":4859,"l":2},{"t":"8dqln","tid":3,"ts":4859,"l":2},{"t":"8dqih","tid"
:3,"ts":4859,"l":2},{"t":"4qnnm","tid":3,"ts":4862,"l":2,"a":3,"ie":0},{"t":"4qnnl","tid":3,"ts":4897,"l":2,"a":3,"ie":
1},{"t":"4qnng","tid":3,"ts":4897,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":4899,"l":2,"a":2,"ie":1},{"t":"4qnne","
tid":3,"ts":4900,"l":2,"a":3,"ie":0},{"t":"4qnnd","tid":3,"ts":4904,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":3,"ts":4916,
"l":2},{"t":"4waym","tid":3,"ts":4916,"l":2},{"t":"4pqvy","tid":3,"ts":4927,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [RuntimeBroker] WAM
response status success
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Checking MsalTokenResponse returned from broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Success. Broker response contains an access token.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Broker attempt completed successfully.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Checking client info returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Saving token response to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] [SaveTokenResponseAsync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5]  AT expiration time: 7/2/2025 6:51:57 PM +00:00, scopes: Application.Read.All
Device.ReadWrite.All DeviceManagementManagedDevices.Read.All Directory.AccessAsUser.All Directory.Read.All email
Group.ReadWrite.All openid PrivilegedAccess.Read.AzureAD PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup
PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup profile RoleManagement.ReadWrite.Directory
RoleManagementPolicy.Read.AzureADGroup Sites.Manage.All Sites.Read.All Sites.ReadWrite.All User.Read User.Read.All
User.ReadWrite.All UserAuthenticationMethod.Read.All UserAuthenticationMethod.ReadWrite.All. source: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Fetched access token from host login.microsoftonline.com.
DEBUG: InteractiveBrowserCredential.Authenticate succeeded. Scopes: [ User.read ] ParentRequestId:  ExpiresOn:
2025-07-02T18:51:57.1131477+00:00
DEBUG: InteractiveBrowserCredential.GetToken invoked. Scopes: [ User.read ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] MSAL MSAL.Desktop with assembly version '4.61.3.0'.
CorrelationId(42fa0a31-2bdf-4c8b-8035-c30acd8a29bd)
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === AcquireTokenSilent Parameters ===
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] LoginHint provided: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Account provided: True
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] ForceRefresh: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd]
=== Request Data ===
Authority Provided? - True
Scopes - User.read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === Token Acquisition (SilentRequest) started:
  Scopes: User.read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Broker is configured and enabled, attempting to use broker instead.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [Runtime] WAM
supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0005] WARNING
SetAuthorityString:98 Initializing authority from string
'https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e/' without authority type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: api_name, Value: ReadAccountById
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: correlation_id, Value: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: broker_app_used, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: request_duration, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
SetCorrelationId:273 Set correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
EnqueueBackgroundRequest:952 The original authority is
'https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
ModifyAndValidateAuthParameters:215 Authority Realm: de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
StorageTokenResponse:84 StorageTokenResponse account constructor invoked. This is only expected in Runtime flows
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: api_name, Value: AcquireTokenSilently
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authority_type, Value: AAD
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: access_token_expiry_time, Value: 2025-07-02T18:51:58.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: read_token, Value: ID|AT
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: correlation_id, Value: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: broker_app_used, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: original_authority, Value:
https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: storage_read, Value: DAC|DAT|DID
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: auth_flow, Value: AT
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authorization_type, Value: WindowsIntegratedAuth
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: request_duration, Value: 8
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:406 Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:414
{"t":"4s7uc","tid":6,"ts":0,"l":2},{"t":"4sufd","tid":6,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":6,"ts":0,"s":3,"l":2},{"
t":"4swgf","tid":6,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":0,"s":3,"l":2},{"t":"8b2yn","tid":3,"ts":0,"l":2},{"t"
:"8dqkx","tid":3,"ts":0,"l":2},{"t":"8dqik","tid":3,"ts":0,"l":2},{"t":"4q2di","tid":3,"ts":0,"l":2},{"t":"4qnng","tid"
:3,"ts":0,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":3,"ts":1,"l":2},{"t":"
8b2ht","tid":3,"ts":3,"l":2},{"t":"4qnno","tid":3,"ts":3,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":6,"l":2,"a":2,"i
e":1},{"t":"6xuag","tid":3,"ts":6,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [RuntimeBroker] WAM
response status success
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Checking MsalTokenResponse returned from broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Success. Response contains an access token.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Checking client info returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Saving token response to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [SaveTokenResponseAsync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd]  AT expiration time: 7/2/2025 6:51:57 PM +00:00, scopes: Application.Read.All
Device.ReadWrite.All DeviceManagementManagedDevices.Read.All Directory.AccessAsUser.All Directory.Read.All email
Group.ReadWrite.All openid PrivilegedAccess.Read.AzureAD PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup
PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup profile RoleManagement.ReadWrite.Directory
RoleManagementPolicy.Read.AzureADGroup Sites.Manage.All Sites.Read.All Sites.ReadWrite.All User.Read User.Read.All
User.ReadWrite.All UserAuthenticationMethod.Read.All UserAuthenticationMethod.ReadWrite.All. source: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Fetched access token from host login.microsoftonline.com.
DEBUG: InteractiveBrowserCredential.GetToken succeeded. Scopes: [ User.read ] ParentRequestId:  ExpiresOn:
2025-07-02T18:51:57.3922023+00:00
Welcome to Microsoft Graph!

Connected via delegated access using 14d82eec-204b-4c2f-b7e8-296a70dab67e
Readme: https://aka.ms/graph/sdk/powershell
SDK Docs: https://aka.ms/graph/sdk/powershell/docs
API Docs: https://aka.ms/graph/docs

NOTE: You can use the -NoWelcome parameter to suppress this message.



Eleavted (Non-Working)
WS\system32> Connect-MGGraph -Scopes "User.read" -debug
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.read ] ParentRequestId:

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] MSAL MSAL.Desktop with assembly version '4.61.3.0'.
CorrelationId(5fb90c1f-59a3-4aec-be13-0bd41ac806a5)
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5]
=== Request Data ===
Authority Provided? - True
Scopes - User.read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === Token Acquisition (InteractiveRequest) started:
  Scopes: User.read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Fetching instance discovery from the network from host login.microsoftonline.com.

DEBUG: Request [9d0b80e5-0561-4a1d-98db-0be20d0f0276] GET
https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
x-ms-client-request-id:9d0b80e5-0561-4a1d-98db-0be20d0f0276
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity.Broker/1.1.0 (.NET Framework 4.8.9300.0; Microsoft Windows 10.0.22631 )
client assembly: Azure.Identity.Broker
DEBUG: Response [9d0b80e5-0561-4a1d-98db-0be20d0f0276] 200 OK (00.2s)
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
client-request-id:REDACTED
x-ms-request-id:faf35670-c868-41d2-9379-7810ee051200
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
Content-Security-Policy-Report-Only:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:max-age=86400, private
Content-Type:application/json; charset=utf-8
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 02 Jul 2025 17:45:56 GMT
Content-Length:950
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Authority validation enabled? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Authority validation - is known env? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Broker is configured. Starting broker flow without knowing the broker
installation app link.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [Runtime] WAM
supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker]
Calling SignInInteractivelyAsync this will show the account picker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0001] WARNING
SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/common/' without authority
type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
SetCorrelationId:273 Set correlation ID: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1103 The original authority is 'https://login.microsoftonline.com/common'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] WARNING
TryNormalizeRealm:2421 No HomeAccountId provided to normalize the realm
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1114 The normalized realm is ''
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
ModifyAndValidateAuthParameters:215 Authority Realm: common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0003] WARNING
ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token
reads will fail
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0003] WARNING
ReadAccountById:227 Account id is empty - account not found
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
ErrorInternalImpl:116 Created an error: 55xnk, StatusInternal::UserCanceled, InternalEvent::None, Context 'User
cancelled the Accounts Control Operation.'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:45:56.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_name, Value: SignInInteractively
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_status_code, Value: StatusInternal::UserCanceled
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: correlation_id, Value: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: broker_app_used, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:45:56.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: all_error_tags, Value: 55xnk
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: read_token_last_error, Value: missing required parameter
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: ui_event_count, Value: 1
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: authorization_type, Value: Interactive
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_error_code, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_error_tag, Value: 55xnk
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_error_context, Value: User cancelled the Accounts Control Operation.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: is_successful, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: request_duration, Value: 126
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:406 Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:414
{"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":2,"l":2},{"t":"4sufd","tid":2,"ts":2,"s":2,"l":2},{"t":"4s
wgg","tid":2,"ts":2,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":2,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t"
:"8dqim","tid":3,"ts":3,"l":2},{"t":"8dqkl","tid":3,"ts":9,"l":2,"a":9,"ie":0},{"t":"54uxd","tid":2,"ts":9,"l":2},{"t":
"8dqkn","tid":4,"ts":115,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":115,"l":2,"a":9,"ie":1},{"t":"646u1","tid":4,"ts
":115,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker] Could
not sign in interactively. Status: UserCanceled
Context: User cancelled the Accounts Control Operation.
Tag: 0x1f7d734a
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker]
Processing WAM exception
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker]
authentication_canceled User canceled authentication.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:57Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Exception type: Microsoft.Identity.Client.MsalClientException
, ErrorCode: authentication_canceled
To see full exception details, enable PII Logging. See https://aka.ms/msal-net-logging
   at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.WamAdapters.HandleResponse(AuthResult authResult,
AuthenticationRequestParameters authenticationRequestParameters, ILoggerAdapter logger, String errorMessage)
   at
Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.<SignInInteractivelyAsync>d__13.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at
Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.<AcquireTokenInteractiveAsync>d__12.MoveNext()

--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Internal.Broker.BrokerInteractiveRequestComponent.<FetchTokensAsync>d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.<FetchTokensFromBrokerAsync>d__10.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.<GetTokenResponseAsync>d__11.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.<ExecuteAsync>d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<<RunAsync>b__1>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Utils.StopwatchService.<MeasureCodeBlockAsync>d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Identity.Client.Internal.Requests.RequestBase.<RunAsync>d__11.MoveNext()
DEBUG: InteractiveBrowserCredential.Authenticate was unable to retrieve an access token. Scopes: [ User.read ]
ParentRequestId:  Exception: Azure.Identity.AuthenticationFailedException (0x80131500): InteractiveBrowserCredential
authentication failed: User canceled authentication.
---> Microsoft.Identity.Client.MsalClientException (0x80131500): User canceled authentication.

Confirm
InteractiveBrowserCredential authentication failed: User canceled authentication.
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
Connect-MGGraph : InteractiveBrowserCredential authentication failed: User canceled authentication.
At line:1 char:1
+ Connect-MGGraph -Scopes "User.read" -debug
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Connect-MgGraph], AuthenticationFailedException
    + FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Configuration

Windows 11 Enterprise
23H2

Other information

No response

[Zubi1989]

@timayabi2020 @peombwa @psignoret for awareness.

[gavinbarron]

@patrmur can you please retry this with the latest version of the module (v2.34.0)

I'd like to understand the scope of impact here too, if I'm getting what you're saying this is an issue when running the PowerShell terminal as Admin with UAC disabled in Windows?

[patrmur]

@gavinbarron The issue arrose when running Powershell as Administrator. (Either with UAC on and using right click Run as Administrator, or by having UAC off which in turn launches Powershell in Administrator by default). I will go ahead and test with new verion.

Edited***
The latest version appears to have resolved the issue.