Tag: AzureAD

What’s Azure AD? Best go straight to the source for the description! Microsoft says:

“Azure Active Directory (Azure AD) is Microsoft’s multi-tenant, cloud based directory and identity management service. Azure AD combines core directory services, advanced identity governance, and application access management. Azure AD also offers a rich, standards-based platform that enables developers to deliver access control to their applications, based on centralized policy and rules.”

So, in short, you’ll manage cloud identities in Microsoft’s extended ecosystem with AAD. When you use Office 365, Azure or Intune, you’re using AAD implicitly.

You can use the Azure portal to add or modify a few users. Alternatively, you can synchronize your identities from an on-premises Active Directory instance using Azure AD Connect (which replaces DirSync).

Azure Active Directory (Azure AD)
Azure Active Directory (Azure AD)

Why should you care about it?

In practice, for a developer Azure AD typically comes into play when one needs to handle authentication to their app functioning in Microsoft’s ecosystem. If you’re doing anything with Azure of Office 365, chances are you’re already running into different Azure Active Directory errors every now and then! Even for a normal user, who’s doing nothing out of the ordinary, some of the error messages – often starting with AADSTS – might’ve become quite familiar!

So all in all, Azure AD is s definitely a worthy topic for a developer like me who spends a lot of his time with SharePoint and Office365 😁

What are these posts about?

These blog posts handle different configuration tips when using Azure Active Directory. Basically, I’m describing different things you can do to solve different errors with AAD, and how to develop apps using it.

Did I mention errors? Yes – in fact, yes I did! A lot of my posts are focused around solving issues with different authentication configurations. You typically encounter an error with a code that starts with “AADSTS” – some typical ones would be AADSTS65001 and AADSTS50011. My blog articles aim to produce different solutions to these errors, that are often fixed by fairly simple configuration changes.

Encountering AADSTS700054 in the wild. Always a bother - but let me tell you how to fix it!

How to fix “AADSTS700054: response_type ‘id_token’ is not enabled for the application” error

Another day, another unsuccessful authentication attempt, and another cool error code. I encountered his one whilst building a little POC that was supposed to authenticate against Graph API. This time, I was thrown an “AADSTS700054” error… But no worries! This article will explain to you how to fix it, at…Continue reading How to fix “AADSTS700054: response_type ‘id_token’ is not enabled for the application” error

Azure Active Directory, the advanced logo

How to fix an “AADSTS500113: No reply address is registered for the application” error?

This article describes how to fix the “AADSTS500113: no-reply address is registered for the application” error. You typically get this error, when your app is trying to authenticate your users against Azure Active Directory. I have been posting about different versions of the Azure Active Directory authentication errors (different errors…Continue reading How to fix an “AADSTS500113: No reply address is registered for the application” error?

Have you tried turning it off and on again?

How to fix “AADSTS90008: The user or administrator has not consented to use the application”?

A couple of days ago, I got a comment asking how to fix error AADSTS90008 when developing an application using Azure Active Directory The error in question was this: AADSTS90008: The user or administrator has not consented to use the application with ID ‘[guid]’. This happened because application is misconfigured:…Continue reading How to fix “AADSTS90008: The user or administrator has not consented to use the application”?

AADSTS50011: The reply address ... does not match the reply addresses configured for the application.

How to fix “AADSTS50011: Reply address did not match because of case sensitivity.”

So, you got an AADSTS50011 error code? It’s just Azure AD’s authentication acting up because of an invalid reply address! Here are a bunch of different reasons that could have led to this error. This post describes the variant where the URL’s case sensitivity differs from what’s configured. For me,…Continue reading How to fix “AADSTS50011: Reply address did not match because of case sensitivity.”

Azure Active Directory (Azure AD)

How to fix “AADSTS50011: The reply address does not match the reply addresses configured” -error

So, you have an error with the code AADSTS50011? That’s ok – it’s just Azure AD‘s authentication acting up because of invalid reply URLs! Most of the time, it’s a simple configuration issue. Since there might be a couple of different reasons for this error, this post also describes a…Continue reading How to fix “AADSTS50011: The reply address does not match the reply addresses configured” -error

AADSTS50059: No tenant-identifying information found in either the request or implied by any provided credentials.

How to fix AADSTS50059: No tenant-identifying information found in either the request or implied by any provided credentials.

Have you run into the cryptical “AADSTS50059: No tenant-identifying information found in either the request or implied by any provided credentials.” error? I have. This post will tell you how to fix it. How to fix AADSTS50059? I encountered this error while trying to reload a page with some JavaScript…Continue reading How to fix AADSTS50059: No tenant-identifying information found in either the request or implied by any provided credentials.