terminal icon indicating copy to clipboard operation
terminal copied to clipboard

Azure Cloud Shell, Conditional Access and a device from a platform (Unknown)

Open dronkoff opened this issue 2 years ago • 7 comments

Windows Terminal version

1.15.2875.0

Windows build number

10.0.22621.0

Other Software

No response

Steps to reproduce

  1. Open WT,
  2. Open new Azure Cloud Shell tab,
  3. Follow the Device Loging procedure,
  4. After successful login a list of tenants will be displayed,
  5. Select a tenant with a conditional access policy for supported device platforms.

Expected Behavior

After selecting a tenant, an expected behavior is to see the question "Do you want to save these connection settings for future logins?", then "Requesting a cloud shell instance...", etc.

Actual Behavior

AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors. Trace ID: 181f4dd3-939b-4e6b-9544-b1b898145d00 Correlation ID: 963c9066-e711-4014-bd50-5973700a5fe0 Timestamp: 2022-11-17 17:20:15Z [process exited with code 1 (0x00000001)]

dronkoff avatar Nov 17 '22 21:11 dronkoff

This appears to be a duplicate of #8158. Would you agree with that?

lhecker avatar Nov 21 '22 15:11 lhecker

Similar, but not sure if the same. In #8158 policy checks if a device is domain joined or not, in this case the question is in platform. I'm trying to connect to the Azure Cloud Shell from WT on a domain joined Win 11 machine to a tenant that checks the platform (Windows is allowed). However, the tenant sees my platform as Unknown rather than Windows and denies access.

dronkoff avatar Nov 23 '22 14:11 dronkoff

I have the same problem here image

coujean99 avatar Dec 02 '22 04:12 coujean99

@hiskhafan , unfortunately that didn't work.

AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors.

dronkoff avatar Dec 16 '22 19:12 dronkoff

Same problem form me :(

TeddyAlbina avatar Jan 25 '23 11:01 TeddyAlbina

Wouldn't it be funny if it used the User-Agent header to detect the client platform like so many websites do it? We send Terminal/0.0.

lhecker avatar Jan 25 '23 15:01 lhecker

I have the same problem here image

Add the same problem. Then ran Cloud Shell from the web interface on the Azure Portal, it told me Storage Account was missing and created it. Problem solved

Adelscott avatar Jan 30 '23 14:01 Adelscott

This could be a missing Storage Account for Cloud Shell. You can log into Azure Portal and check for a storage account tied to the Resource Group cloud-shell-storage-<region> or, select the Cloud Shell in your browser: image and select "Powershell". You will see a notice such as below if it's missing. Once setup, your cloud shell will operate and then try the Azure Cloud Shell from Terminal again. image

davidajacobus avatar Feb 01 '23 12:02 davidajacobus

Folks, this is NOT a missing storage. Storage account is there and a Cloud Shell works from a browser. If you check the issue text, the error message is: "AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors."

dronkoff avatar Feb 02 '23 01:02 dronkoff