Failed to get authentication tokens for Windows Azure AD [#3346603]

Problem/Motivation

Noticed, when using Windows Graph API (v1.0) as a User info endpoint configuration it throws the following error:

Could not retrieve tokens. Details: Client error: `POST login.microsoftonline.com/tenant_id/oauth2/v2.0/token` resulted in a `400 Bad Request` response: {“error”:”invalid_request”,”error_description”:”AADSTS901002: The ‘resource’ request parameter is not supported.

Steps to reproduce

Proposed resolution

When the Windows Graph API (v1.0) is selected, then:

  1. Use ‘scope’ parameter instead of ‘resource’.
  2. Use ‘graph.microsoft.com/.default‘ as the scope value

Remaining tasks

User interface changes

API changes

Data model changes

Read more here: Source link