-
Notifications
You must be signed in to change notification settings - Fork 211
Description
Describe the bug
Hi Team,
I am trying to connect to Microsoft Graph using the WAM login flow by enabling LoginByWAM using elevated Powershell as UAC is turned off. However, I get the following error prior to selecting an account:
Connect-MGGraph : InteractiveBrowserCredential authentication failed: User canceled authentication.
At line:1 char:1
- Connect-MGGraph -Scopes "User.read"
-
+ CategoryInfo : NotSpecified: (:) [Connect-MgGraph], AuthenticationFailedException + FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph
Expected behavior
Successful authentication to Microsoft Graph using WAM.
How to reproduce
Install-Module -Name Microsoft.Graph.Authentication -RequiredVersion 2.25.0
Open Powershell with Right Click Run as Administrator or Set "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA to 0" and restart then launch powershell
Set-MgGraphOption -EnableLoginByWAM $true
Ensure device is registered to Entra with account
Connect-MgGraph
SDK Version
2.25.0
Latest version known to work for scenario above?
No response
Known Workarounds
Set EnableLUA to 1 and then launch as non-elevated powershell.
Debug output
Non-Elevated (working)
Connect-MGGraph -Scopes "User.read" -debug
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.read ] ParentRequestId:
Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] MSAL MSAL.Desktop with assembly version '4.61.3.0'.
CorrelationId(648bc988-5d39-4efe-819f-988de99503d5)
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5]
=== Request Data ===
Authority Provided? - True
Scopes - User.read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 648bc988-5d39-4efe-819f-988de99503d5
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] === Token Acquisition (InteractiveRequest) started:
Scopes: User.read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z -
648bc988-5d39-4efe-819f-988de99503d5] Fetching instance discovery from the network from host login.microsoftonline.com.
DEBUG: Request [f3cef0ac-18f0-4353-93c8-4532a58c9a8d] GET
https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
x-ms-client-request-id:f3cef0ac-18f0-4353-93c8-4532a58c9a8d
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity.Broker/1.1.0 (.NET Framework 4.8.9300.0; Microsoft Windows 10.0.22631 )
client assembly: Azure.Identity.Broker
DEBUG: Response [f3cef0ac-18f0-4353-93c8-4532a58c9a8d] 200 OK (00.5s)
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
client-request-id:REDACTED
x-ms-request-id:0c01cb9d-8d51-4a0d-b4d0-4b72bba61200
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
Content-Security-Policy-Report-Only:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:max-age=86400, private
Content-Type:application/json; charset=utf-8
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 02 Jul 2025 17:47:51 GMT
Content-Length:950
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Authority validation enabled? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Authority validation - is known env? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Broker is configured. Starting broker flow without knowing the broker
installation app link.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [Runtime] WAM
supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z -
648bc988-5d39-4efe-819f-988de99503d5] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [RuntimeBroker]
Calling SignInInteractivelyAsync this will show the account picker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0001] WARNING
SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/common/' without authority
type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
SetCorrelationId:273 Set correlation ID: 648bc988-5d39-4efe-819f-988de99503d5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1103 The original authority is 'https://login.microsoftonline.com/common'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] WARNING
TryNormalizeRealm:2421 No HomeAccountId provided to normalize the realm
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1114 The normalized realm is ''
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO
ModifyAndValidateAuthParameters:215 Authority Realm: common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0003] WARNING
ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token
reads will fail
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0003] WARNING
ReadAccountById:227 Account id is empty - account not found
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:56Z] [MSAL:0003] INFO
SetCanonicalRealm:1106 Normalize realm to: 'de9231de-45f4-4325-ae07-8ae72052517e'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 648bc988-5d39-4efe-819f-988de99503d5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:52.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: api_name, Value: SignInInteractively
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authority_type, Value: AAD
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: access_token_expiry_time, Value: 2025-07-02T18:51:58.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: correlation_id, Value: 648bc988-5d39-4efe-819f-988de99503d5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: broker_app_used, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: read_token_last_error, Value: missing required parameter
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: ui_event_count, Value: 1
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: wam_telemetry, Value:
{"x_ms_clitelem":"1,0,0,1287225.5794,","ui_visible":false,"tenant_id":"de9231de-45f4-4325-ae07-8ae72052517e","scope":"U
ser.read offline_access openid
profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":"
https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose;
charset=utf-8","http_content_size":13859,"device_join":"haadj","correlation_id":"{648bc988-5d39-4efe-819f-988de99503d5}
","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.22621.5415","authorit
y":"https://login.microsoftonline.com/common","api_error_code":0,"account_join_on_start":"secondary","account_join_on_e
nd":"secodary","account_id":"6a50d794-36a8-455e-a5e-d04ae4910f16","silent_code":0,"silent_bi_sub_code":0,"silent_mess
age":"","silent_mats":{"x_ms_clitelem":"1,0,0,1287225.5794,","ui_visible":false,"tenant_id":"de9231de-45f4-4325-ae07-8a
e72052517e","scope":"User.read offline_access openid
profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":"
https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose;
charset=utf-8","http_content_size":13859,"device_join":"haadj","correlation_id":"{648bc988-5d39-4efe-819f-988de99503d5}
","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.22621.5415","authorit
y":"https://login.microsoftonline.com/common","api_error_code":0,"account_join_on_start":"secondary","account_join_on_e
nd":"secodary","account_id":"6a50d794-36a8-455e-a5e-d04ae4910f16"},"silent_status":0,"is_cached":0}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: tenant_id, Value: de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: normalized_realm, Value: de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: write_token, Value: AT|ID
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: storage_write, Value: DAT|DID|DAC
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: storage_read, Value: DAC
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authorization_type, Value: Interactive
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: request_duration, Value: 4935
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:406 Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:414
{"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":1,"l":2},{"t":"4sufd","tid":2,"ts":1,"s":2,"l":2},{"t":"4s
wgg","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t"
:"8dqim","tid":3,"ts":2,"l":2},{"t":"8dqkl","tid":3,"ts":4,"l":2,"a":9,"ie":0},{"t":"54uxe","tid":2,"ts":5,"l":2},{"t":
"4wqm9","tid":4,"ts":2570,"l":2},{"t":"8dql1","tid":4,"ts":4859,"l":2},{"t":"4qopb","tid":4,"ts":4859,"l":2},{"t":"8dqk
n","tid":4,"ts":4859,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":4859,"l":2,"a":9,"ie":1},{"t":"8dqkr","tid":4,"ts":4
859,"l":2},{"t":"4sufd","tid":4,"ts":4859,"s":2,"l":2},{"t":"4swgg","tid":4,"ts":4859,"s":2,"l":2},{"t":"4swgf","tid":4
,"ts":4859,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":4859,"s":2,"l":2},{"t":"8b2yn","tid":3,"ts":4859,"l":2},{"t":"8dqlh",
"tid":3,"ts":4859,"l":2},{"t":"8dqli","tid":3,"ts":4859,"l":2},{"t":"8dqln","tid":3,"ts":4859,"l":2},{"t":"8dqih","tid"
:3,"ts":4859,"l":2},{"t":"4qnnm","tid":3,"ts":4862,"l":2,"a":3,"ie":0},{"t":"4qnnl","tid":3,"ts":4897,"l":2,"a":3,"ie":
1},{"t":"4qnng","tid":3,"ts":4897,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":4899,"l":2,"a":2,"ie":1},{"t":"4qnne","
tid":3,"ts":4900,"l":2,"a":3,"ie":0},{"t":"4qnnd","tid":3,"ts":4904,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":3,"ts":4916,
"l":2},{"t":"4waym","tid":3,"ts":4916,"l":2},{"t":"4pqvy","tid":3,"ts":4927,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [RuntimeBroker] WAM
response status success
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Checking MsalTokenResponse returned from broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Success. Broker response contains an access token.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Broker attempt completed successfully.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Checking client info returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Saving token response to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] [SaveTokenResponseAsync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] AT expiration time: 7/2/2025 6:51:57 PM +00:00, scopes: Application.Read.All
Device.ReadWrite.All DeviceManagementManagedDevices.Read.All Directory.AccessAsUser.All Directory.Read.All email
Group.ReadWrite.All openid PrivilegedAccess.Read.AzureAD PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup
PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup profile RoleManagement.ReadWrite.Directory
RoleManagementPolicy.Read.AzureADGroup Sites.Manage.All Sites.Read.All Sites.ReadWrite.All User.Read User.Read.All
User.ReadWrite.All UserAuthenticationMethod.Read.All UserAuthenticationMethod.ReadWrite.All. source: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
648bc988-5d39-4efe-819f-988de99503d5] Fetched access token from host login.microsoftonline.com.
DEBUG: InteractiveBrowserCredential.Authenticate succeeded. Scopes: [ User.read ] ParentRequestId: ExpiresOn:
2025-07-02T18:51:57.1131477+00:00
DEBUG: InteractiveBrowserCredential.GetToken invoked. Scopes: [ User.read ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] MSAL MSAL.Desktop with assembly version '4.61.3.0'.
CorrelationId(42fa0a31-2bdf-4c8b-8035-c30acd8a29bd)
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === AcquireTokenSilent Parameters ===
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] LoginHint provided: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Account provided: True
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] ForceRefresh: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd]
=== Request Data ===
Authority Provided? - True
Scopes - User.read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === Token Acquisition (SilentRequest) started:
Scopes: User.read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Broker is configured and enabled, attempting to use broker instead.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [Runtime] WAM
supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0005] WARNING
SetAuthorityString:98 Initializing authority from string
'https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e/' without authority type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: api_name, Value: ReadAccountById
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: correlation_id, Value: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: broker_app_used, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
LogTelemetryData:401 Key: request_duration, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
SetCorrelationId:273 Set correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
EnqueueBackgroundRequest:952 The original authority is
'https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO
ModifyAndValidateAuthParameters:215 Authority Realm: de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
StorageTokenResponse:84 StorageTokenResponse account constructor invoked. This is only expected in Runtime flows
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: api_name, Value: AcquireTokenSilently
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authority_type, Value: AAD
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: access_token_expiry_time, Value: 2025-07-02T18:51:58.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: read_token, Value: ID|AT
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: correlation_id, Value: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: broker_app_used, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: original_authority, Value:
https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: storage_read, Value: DAC|DAT|DID
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: auth_flow, Value: AT
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: authorization_type, Value: WindowsIntegratedAuth
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:401 Key: request_duration, Value: 8
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:406 Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO
LogTelemetryData:414
{"t":"4s7uc","tid":6,"ts":0,"l":2},{"t":"4sufd","tid":6,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":6,"ts":0,"s":3,"l":2},{"
t":"4swgf","tid":6,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":0,"s":3,"l":2},{"t":"8b2yn","tid":3,"ts":0,"l":2},{"t"
:"8dqkx","tid":3,"ts":0,"l":2},{"t":"8dqik","tid":3,"ts":0,"l":2},{"t":"4q2di","tid":3,"ts":0,"l":2},{"t":"4qnng","tid"
:3,"ts":0,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":3,"ts":1,"l":2},{"t":"
8b2ht","tid":3,"ts":3,"l":2},{"t":"4qnno","tid":3,"ts":3,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":6,"l":2,"a":2,"i
e":1},{"t":"6xuag","tid":3,"ts":6,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [RuntimeBroker] WAM
response status success
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Checking MsalTokenResponse returned from broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Success. Response contains an access token.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Checking client info returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Saving token response to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [SaveTokenResponseAsync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] AT expiration time: 7/2/2025 6:51:57 PM +00:00, scopes: Application.Read.All
Device.ReadWrite.All DeviceManagementManagedDevices.Read.All Directory.AccessAsUser.All Directory.Read.All email
Group.ReadWrite.All openid PrivilegedAccess.Read.AzureAD PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup
PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup profile RoleManagement.ReadWrite.Directory
RoleManagementPolicy.Read.AzureADGroup Sites.Manage.All Sites.Read.All Sites.ReadWrite.All User.Read User.Read.All
User.ReadWrite.All UserAuthenticationMethod.Read.All UserAuthenticationMethod.ReadWrite.All. source: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z -
42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Fetched access token from host login.microsoftonline.com.
DEBUG: InteractiveBrowserCredential.GetToken succeeded. Scopes: [ User.read ] ParentRequestId: ExpiresOn:
2025-07-02T18:51:57.3922023+00:00
Welcome to Microsoft Graph!
Connected via delegated access using 14d82eec-204b-4c2f-b7e8-296a70dab67e
Readme: https://aka.ms/graph/sdk/powershell
SDK Docs: https://aka.ms/graph/sdk/powershell/docs
API Docs: https://aka.ms/graph/docs
NOTE: You can use the -NoWelcome parameter to suppress this message.
Eleavted (Non-Working)
WS\system32> Connect-MGGraph -Scopes "User.read" -debug
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.read ] ParentRequestId:
Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] MSAL MSAL.Desktop with assembly version '4.61.3.0'.
CorrelationId(5fb90c1f-59a3-4aec-be13-0bd41ac806a5)
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5]
=== Request Data ===
Authority Provided? - True
Scopes - User.read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === Token Acquisition (InteractiveRequest) started:
Scopes: User.read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Fetching instance discovery from the network from host login.microsoftonline.com.
DEBUG: Request [9d0b80e5-0561-4a1d-98db-0be20d0f0276] GET
https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
x-ms-client-request-id:9d0b80e5-0561-4a1d-98db-0be20d0f0276
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity.Broker/1.1.0 (.NET Framework 4.8.9300.0; Microsoft Windows 10.0.22631 )
client assembly: Azure.Identity.Broker
DEBUG: Response [9d0b80e5-0561-4a1d-98db-0be20d0f0276] 200 OK (00.2s)
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
client-request-id:REDACTED
x-ms-request-id:faf35670-c868-41d2-9379-7810ee051200
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
Content-Security-Policy-Report-Only:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:max-age=86400, private
Content-Type:application/json; charset=utf-8
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 02 Jul 2025 17:45:56 GMT
Content-Length:950
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Authority validation enabled? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Authority validation - is known env? True.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Broker is configured. Starting broker flow without knowing the broker
installation app link.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [Runtime] WAM
supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker]
Calling SignInInteractivelyAsync this will show the account picker.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0001] WARNING
SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/common/' without authority
type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
SetCorrelationId:273 Set correlation ID: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1103 The original authority is 'https://login.microsoftonline.com/common'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] WARNING
TryNormalizeRealm:2421 No HomeAccountId provided to normalize the realm
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
ExecuteInteractiveRequest:1114 The normalized realm is ''
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO
ModifyAndValidateAuthParameters:215 Authority Realm: common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0003] WARNING
ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token
reads will fail
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0003] WARNING
ReadAccountById:227 Account id is empty - account not found
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
ErrorInternalImpl:116 Created an error: 55xnk, StatusInternal::UserCanceled, InternalEvent::None, Context 'User
cancelled the Accounts Control Operation.'
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:393 Printing Telemetry for Correlation ID: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:45:56.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_name, Value: SignInInteractively
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_status_code, Value: StatusInternal::UserCanceled
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: correlation_id, Value: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: broker_app_used, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:45:56.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: all_error_tags, Value: 55xnk
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/common
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: read_token_last_error, Value: missing required parameter
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: ui_event_count, Value: 1
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: authorization_type, Value: Interactive
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_error_code, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_error_tag, Value: 55xnk
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: api_error_context, Value: User cancelled the Accounts Control Operation.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: is_successful, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:401 Key: request_duration, Value: 126
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:406 Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO
LogTelemetryData:414
{"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":2,"l":2},{"t":"4sufd","tid":2,"ts":2,"s":2,"l":2},{"t":"4s
wgg","tid":2,"ts":2,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":2,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t"
:"8dqim","tid":3,"ts":3,"l":2},{"t":"8dqkl","tid":3,"ts":9,"l":2,"a":9,"ie":0},{"t":"54uxd","tid":2,"ts":9,"l":2},{"t":
"8dqkn","tid":4,"ts":115,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":115,"l":2,"a":9,"ie":1},{"t":"646u1","tid":4,"ts
":115,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker] Could
not sign in interactively. Status: UserCanceled
Context: User cancelled the Accounts Control Operation.
Tag: 0x1f7d734a
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker]
Processing WAM exception
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker]
authentication_canceled User canceled authentication.
DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:57Z -
5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Exception type: Microsoft.Identity.Client.MsalClientException
, ErrorCode: authentication_canceled
To see full exception details, enable PII Logging. See https://aka.ms/msal-net-logging
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.WamAdapters.HandleResponse(AuthResult authResult,
AuthenticationRequestParameters authenticationRequestParameters, ILoggerAdapter logger, String errorMessage)
at
Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.d__13.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at
Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.d__12.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Broker.BrokerInteractiveRequestComponent.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.d__10.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.d__11.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<b__1>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Utils.StopwatchService.d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.d__11.MoveNext()
DEBUG: InteractiveBrowserCredential.Authenticate was unable to retrieve an access token. Scopes: [ User.read ]
ParentRequestId: Exception: Azure.Identity.AuthenticationFailedException (0x80131500): InteractiveBrowserCredential
authentication failed: User canceled authentication.
---> Microsoft.Identity.Client.MsalClientException (0x80131500): User canceled authentication.
Confirm
InteractiveBrowserCredential authentication failed: User canceled authentication.
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A
Connect-MGGraph : InteractiveBrowserCredential authentication failed: User canceled authentication.
At line:1 char:1
- Connect-MGGraph -Scopes "User.read" -debug
-
+ CategoryInfo : NotSpecified: (:) [Connect-MgGraph], AuthenticationFailedException + FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph
Configuration
Windows 11 Enterprise
23H2
Other information
No response