Azure AD (Microsoft Entra) Bulk Token Troubleshooting

 I had an issue with trying to create an AAD bulk token via the Windows Configuration Designer .

The error message I had:



Checking the log located here:
{Replace Kyle with your username}
C:\Users\Kyle\Documents\Windows Imaging and Configuration Designer (WICD)\Project_Name\ICD.log

9/13/2023 3:37:53 PM Info Project 'New' created successfully and added to workspace
9/13/2023 3:37:53 PM Info Loading scenario ID: xxxxx-xxxxxxx-xxxxxx-xxxxxxx, URI: http://localhost:9098/Scenarios/xxxxxxx-xxxxxxx-xxxxxx-xxxxx/Index.html
9/13/2023 3:38:36 PM Error Bulk token retrieval failed: {"error":"server_error","error_description":"AADSTS90092: Non-retryable error has occurred.\r\nTrace ID: caxxxxxx-xxxxxxx-xxxxxx-xxxxxx\r\nCorrelation ID: xxxxxx-xxxxxx-xxxxxx-xxxxxxx\r\nTimestamp: 2023-09-13 20:38:36Z","error_codes":[90092],"timestamp":"2023-09-13 20:38:36Z","trace_id":"xxxxxx-xxxxxxx-xxxxxxx-xxxxxx","correlation_id":"xxxxxxx-xxxxxx-xxxxxxx-xxxxxxx-xxxxxx"}
9/13/2023 3:51:28 PM Error Access token retrieval failed with status: ProviderError


Talking with Microsoft Support and this error code AADSTS90092 doesn't really mean anything and since the request doesn't even hit Azure AD there is no troubleshooting from that end.

After looking into this some more I found the issue is the Enterprise app that gets created was created with wrong permissions.

This is what the permissions looked like:


This is what the permissions should look like:



In my testing, I was able to fix this issue, by deleting the bad permissions enterprise app and letting WCD re-create this when you try to get the AAD bulk token again.


This is what the WCD Enterprise app creation looks like:


Hopefully, this helps others out with this same issue.


Comments

  1. Thank you! I have been trying to fix this for days.

    ReplyDelete
  2. BRUH THANK YOU SO MUCH, I haven't been able to find a solution for this until now!

    ReplyDelete

Post a Comment

Popular posts from this blog

Setup Device Compliance with Jamf and Intune

Set Account Pictures via Jamf Connect

Vanta mass deployment