Skip to content

Web Activity in Azure Government Authentication with Service Principal fails with error Confidential Client is not supported in Cross Cloud request #719

@EntityAdam

Description

@EntityAdam

Questions:
Seems like the authentication request is trying to use Azure Commercial (login.microsoftonline.com) to authenticate the SP. How do we provide the correct authority (login.microsoftonline.us) for Azure Government?

If I use a REST call to get a token from login.microsoftonline.us, and pass the client credentials and secret, it works dandy.

Error:

GetSpnAuthenticationToken: Failed while processing request for access token with error: Failed to get access token by using service principal. Error: invalid_request, Error Message: AADSTS900382: Confidential Client is not supported in Cross Cloud request. Trace ID: {TRACE_ID} Correlation ID: {CORRELATION_ID} Timestamp: {TIMESTAMP}.
{
    "name": "SitesList",
    "type": "WebActivity",
    "dependsOn": [],
    "policy": {
        "timeout": "0.12:00:00",
        "retry": 0,
        "retryIntervalInSeconds": 30,
        "secureOutput": false,
        "secureInput": false
    },
    "userProperties": [],
    "typeProperties": {
        "method": "GET",
        "url": "https://graph.microsoft.us/v1.0/sites/root/lists",
        "authentication": {
            "type": "ServicePrincipal",
            "userTenant": "{TENANT_ID}",
            "username": "{SERVICE_PRINCIPAL_APP_ID",
            "resource": "https://graph.microsoft.us",
            "password": {
                "type": "SecureString",
                "value": "**********"
            }
        }
    }
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions