msgraph-sdk-powershell icon indicating copy to clipboard operation
msgraph-sdk-powershell copied to clipboard
verified publisher icon microsoftgraph

[Connect-MgGraph], AuthenticationFailedException

Open patrmur opened this issue 6 months ago • 1 comments

Describe the bug

Hi Team,

I am trying to connect to Microsoft Graph using the WAM login flow by enabling LoginByWAM using elevated Powershell as UAC is turned off. However, I get the following error prior to selecting an account:

Connect-MGGraph : InteractiveBrowserCredential authentication failed: User canceled authentication. At line:1 char:1

  • Connect-MGGraph -Scopes "User.read"
  •   + CategoryInfo          : NotSpecified: (:) [Connect-MgGraph], AuthenticationFailedException
  + FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Expected behavior

Successful authentication to Microsoft Graph using WAM.

How to reproduce

Install-Module -Name Microsoft.Graph.Authentication -RequiredVersion 2.25.0 Open Powershell with Right Click Run as Administrator or Set "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA to 0" and restart then launch powershell Set-MgGraphOption -EnableLoginByWAM $true Ensure device is registered to Entra with account Connect-MgGraph

SDK Version

2.25.0

Latest version known to work for scenario above?

No response

Known Workarounds

Set EnableLUA to 1 and then launch as non-elevated powershell.

Debug output

Non-Elevated (working)

Connect-MGGraph -Scopes "User.read" -debug DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.read ] ParentRequestId:

Confirm Continue with this operation? [Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A DEBUG: Executing interactive authentication workflow inline. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] MSAL MSAL.Desktop with assembly version '4.61.3.0'. CorrelationId(648bc988-5d39-4efe-819f-988de99503d5) DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] === InteractiveParameters Data === LoginHint provided: False User provided: False UseEmbeddedWebView: NotSpecified ExtraScopesToConsent: Prompt: select_account HasCustomWebUi: False DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] === Request Data === Authority Provided? - True Scopes - User.read Extra Query Params Keys (space separated) - ApiId - AcquireTokenInteractive IsConfidentialClient - False SendX5C - False LoginHint ? False IsBrokerConfigured - True HomeAccountId - False CorrelationId - 648bc988-5d39-4efe-819f-988de99503d5 UserAssertion set: False LongRunningOboCacheKey set: False Region configured: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] === Token Acquisition (InteractiveRequest) started: Scopes: User.read Authority Host: login.microsoftonline.com DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] [Instance Discovery] Instance discovery is enabled and will be performed DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] [Region discovery] Not using a regional authority. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:51Z - 648bc988-5d39-4efe-819f-988de99503d5] Fetching instance discovery from the network from host login.microsoftonline.com.

DEBUG: Request [f3cef0ac-18f0-4353-93c8-4532a58c9a8d] GET https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED x-client-SKU:REDACTED x-client-Ver:REDACTED x-client-OS:REDACTED client-request-id:REDACTED return-client-request-id:REDACTED x-app-name:REDACTED x-app-ver:REDACTED x-ms-client-request-id:f3cef0ac-18f0-4353-93c8-4532a58c9a8d x-ms-return-client-request-id:true User-Agent:azsdk-net-Identity.Broker/1.1.0 (.NET Framework 4.8.9300.0; Microsoft Windows 10.0.22631 ) client assembly: Azure.Identity.Broker DEBUG: Response [f3cef0ac-18f0-4353-93c8-4532a58c9a8d] 200 OK (00.5s) Strict-Transport-Security:REDACTED X-Content-Type-Options:REDACTED Access-Control-Allow-Origin:REDACTED Access-Control-Allow-Methods:REDACTED client-request-id:REDACTED x-ms-request-id:0c01cb9d-8d51-4a0d-b4d0-4b72bba61200 x-ms-ests-server:REDACTED x-ms-srs:REDACTED Content-Security-Policy-Report-Only:REDACTED X-XSS-Protection:REDACTED Cache-Control:max-age=86400, private Content-Type:application/json; charset=utf-8 P3P:REDACTED Set-Cookie:REDACTED Date:Wed, 02 Jul 2025 17:47:51 GMT Content-Length:950 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z - 648bc988-5d39-4efe-819f-988de99503d5] Authority validation enabled? True. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z - 648bc988-5d39-4efe-819f-988de99503d5] Authority validation - is known env? True. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z - 648bc988-5d39-4efe-819f-988de99503d5] Broker is configured. Starting broker flow without knowing the broker installation app link. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [Runtime] WAM supported OS. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z - 648bc988-5d39-4efe-819f-988de99503d5] Can invoke broker. Will attempt to acquire token with broker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [RuntimeBroker] Calling SignInInteractivelyAsync this will show the account picker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0001] WARNING SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/common/' without authority type, defaulting to MsSts DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO SetCorrelationId:273 Set correlation ID: 648bc988-5d39-4efe-819f-988de99503d5 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1103 The original authority is 'https://login.microsoftonline.com/common' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] WARNING TryNormalizeRealm:2421 No HomeAccountId provided to normalize the realm DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1114 The normalized realm is '' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:215 Authority Realm: common DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0003] WARNING ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token reads will fail DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:52Z] [MSAL:0003] WARNING ReadAccountById:227 Account id is empty - account not found DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:56Z] [MSAL:0003] INFO SetCanonicalRealm:1106 Normalize realm to: 'de9231de-45f4-4325-ae07-8ae72052517e' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:393 Printing Telemetry for Correlation ID: 648bc988-5d39-4efe-819f-988de99503d5 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:52.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: api_name, Value: SignInInteractively DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: was_request_throttled, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: authority_type, Value: AAD DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: access_token_expiry_time, Value: 2025-07-02T18:51:58.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: correlation_id, Value: 648bc988-5d39-4efe-819f-988de99503d5 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: broker_app_used, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/common DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: read_token_last_error, Value: missing required parameter DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: request_eligible_for_broker, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: auth_flow, Value: Broker DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: ui_event_count, Value: 1 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,0,0,1287225.5794,","ui_visible":false,"tenant_id":"de9231de-45f4-4325-ae07-8ae72052517e","scope":"U ser.read offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":" https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose; charset=utf-8","http_content_size":13859,"device_join":"haadj","correlation_id":"{648bc988-5d39-4efe-819f-988de99503d5} ","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.22621.5415","authorit y":"https://login.microsoftonline.com/common","api_error_code":0,"account_join_on_start":"secondary","account_join_on_e nd":"secodary","account_id":"6a50d794-36a8-455e-a5e-d04ae4910f16","silent_code":0,"silent_bi_sub_code":0,"silent_mess age":"","silent_mats":{"x_ms_clitelem":"1,0,0,1287225.5794,","ui_visible":false,"tenant_id":"de9231de-45f4-4325-ae07-8a e72052517e","scope":"User.read offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":" https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose; charset=utf-8","http_content_size":13859,"device_join":"haadj","correlation_id":"{648bc988-5d39-4efe-819f-988de99503d5} ","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.22621.5415","authorit y":"https://login.microsoftonline.com/common","api_error_code":0,"account_join_on_start":"secondary","account_join_on_e nd":"secodary","account_id":"6a50d794-36a8-455e-a5e-d04ae4910f16"},"silent_status":0,"is_cached":0} DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: tenant_id, Value: de9231de-45f4-4325-ae07-8ae72052517e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: normalized_realm, Value: de9231de-45f4-4325-ae07-8ae72052517e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: write_token, Value: AT|ID DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: storage_write, Value: DAT|DID|DAC DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: storage_read, Value: DAC DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: is_successful, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: authorization_type, Value: Interactive DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: request_duration, Value: 4935 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:406 Printing Execution Flow: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:414 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":1,"l":2},{"t":"4sufd","tid":2,"ts":1,"s":2,"l":2},{"t":"4s wgg","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t" :"8dqim","tid":3,"ts":2,"l":2},{"t":"8dqkl","tid":3,"ts":4,"l":2,"a":9,"ie":0},{"t":"54uxe","tid":2,"ts":5,"l":2},{"t": "4wqm9","tid":4,"ts":2570,"l":2},{"t":"8dql1","tid":4,"ts":4859,"l":2},{"t":"4qopb","tid":4,"ts":4859,"l":2},{"t":"8dqk n","tid":4,"ts":4859,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":4859,"l":2,"a":9,"ie":1},{"t":"8dqkr","tid":4,"ts":4 859,"l":2},{"t":"4sufd","tid":4,"ts":4859,"s":2,"l":2},{"t":"4swgg","tid":4,"ts":4859,"s":2,"l":2},{"t":"4swgf","tid":4 ,"ts":4859,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":4859,"s":2,"l":2},{"t":"8b2yn","tid":3,"ts":4859,"l":2},{"t":"8dqlh", "tid":3,"ts":4859,"l":2},{"t":"8dqli","tid":3,"ts":4859,"l":2},{"t":"8dqln","tid":3,"ts":4859,"l":2},{"t":"8dqih","tid" :3,"ts":4859,"l":2},{"t":"4qnnm","tid":3,"ts":4862,"l":2,"a":3,"ie":0},{"t":"4qnnl","tid":3,"ts":4897,"l":2,"a":3,"ie": 1},{"t":"4qnng","tid":3,"ts":4897,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":4899,"l":2,"a":2,"ie":1},{"t":"4qnne"," tid":3,"ts":4900,"l":2,"a":3,"ie":0},{"t":"4qnnd","tid":3,"ts":4904,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":3,"ts":4916, "l":2},{"t":"4waym","tid":3,"ts":4916,"l":2},{"t":"4pqvy","tid":3,"ts":4927,"l":2} DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [RuntimeBroker] WAM response status success DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] Checking MsalTokenResponse returned from broker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] Success. Broker response contains an access token. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] Broker attempt completed successfully. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] Checking client info returned from the server.. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] Saving token response to cache.. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] [Region discovery] Not using a regional authority. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] [SaveTokenResponseAsync] Saving Id Token and Account in cache ... DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] === Token Acquisition finished successfully: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] AT expiration time: 7/2/2025 6:51:57 PM +00:00, scopes: Application.Read.All Device.ReadWrite.All DeviceManagementManagedDevices.Read.All Directory.AccessAsUser.All Directory.Read.All email Group.ReadWrite.All openid PrivilegedAccess.Read.AzureAD PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup profile RoleManagement.ReadWrite.Directory RoleManagementPolicy.Read.AzureADGroup Sites.Manage.All Sites.Read.All Sites.ReadWrite.All User.Read User.Read.All User.ReadWrite.All UserAuthenticationMethod.Read.All UserAuthenticationMethod.ReadWrite.All. source: Broker DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 648bc988-5d39-4efe-819f-988de99503d5] Fetched access token from host login.microsoftonline.com. DEBUG: InteractiveBrowserCredential.Authenticate succeeded. Scopes: [ User.read ] ParentRequestId: ExpiresOn: 2025-07-02T18:51:57.1131477+00:00 DEBUG: InteractiveBrowserCredential.GetToken invoked. Scopes: [ User.read ] ParentRequestId: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] MSAL MSAL.Desktop with assembly version '4.61.3.0'. CorrelationId(42fa0a31-2bdf-4c8b-8035-c30acd8a29bd) DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === AcquireTokenSilent Parameters === DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] LoginHint provided: False DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Account provided: True DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] ForceRefresh: False DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === Request Data === Authority Provided? - True Scopes - User.read Extra Query Params Keys (space separated) - ApiId - AcquireTokenSilent IsConfidentialClient - False SendX5C - False LoginHint ? False IsBrokerConfigured - True HomeAccountId - False CorrelationId - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd UserAssertion set: False LongRunningOboCacheKey set: False Region configured: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === Token Acquisition (SilentRequest) started: Scopes: User.read Authority Host: login.microsoftonline.com DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Broker is configured and enabled, attempting to use broker instead. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [Runtime] WAM supported OS. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Can invoke broker. Will attempt to acquire token with broker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0005] WARNING SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e/' without authority type, defaulting to MsSts DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:393 Printing Telemetry for Correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:57.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: api_name, Value: ReadAccountById DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: was_request_throttled, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: authority_type, Value: Unknown DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: correlation_id, Value: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: broker_app_used, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: is_successful, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO LogTelemetryData:401 Key: request_duration, Value: 0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO SetCorrelationId:273 Set correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO EnqueueBackgroundRequest:952 The original authority is 'https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0006] INFO ModifyAndValidateAuthParameters:215 Authority Realm: de9231de-45f4-4325-ae07-8ae72052517e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO StorageTokenResponse:84 StorageTokenResponse account constructor invoked. This is only expected in Runtime flows DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:393 Printing Telemetry for Correlation ID: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:47:57.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: api_name, Value: AcquireTokenSilently DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: was_request_throttled, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: authority_type, Value: AAD DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: access_token_expiry_time, Value: 2025-07-02T18:51:58.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: read_token, Value: ID|AT DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: correlation_id, Value: 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: broker_app_used, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:47:57.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/de9231de-45f4-4325-ae07-8ae72052517e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: storage_read, Value: DAC|DAT|DID DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: auth_flow, Value: AT DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: is_successful, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: authorization_type, Value: WindowsIntegratedAuth DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:401 Key: request_duration, Value: 8 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:406 Printing Execution Flow: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [MSAL:0003] INFO LogTelemetryData:414 {"t":"4s7uc","tid":6,"ts":0,"l":2},{"t":"4sufd","tid":6,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":6,"ts":0,"s":3,"l":2},{" t":"4swgf","tid":6,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":0,"s":3,"l":2},{"t":"8b2yn","tid":3,"ts":0,"l":2},{"t" :"8dqkx","tid":3,"ts":0,"l":2},{"t":"8dqik","tid":3,"ts":0,"l":2},{"t":"4q2di","tid":3,"ts":0,"l":2},{"t":"4qnng","tid" :3,"ts":0,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":3,"ts":1,"l":2},{"t":" 8b2ht","tid":3,"ts":3,"l":2},{"t":"4qnno","tid":3,"ts":3,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":6,"l":2,"a":2,"i e":1},{"t":"6xuag","tid":3,"ts":6,"l":2} DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z] [RuntimeBroker] WAM response status success DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Checking MsalTokenResponse returned from broker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Success. Response contains an access token. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Checking client info returned from the server.. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Saving token response to cache.. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Instance Discovery] Instance discovery is enabled and will be performed DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Region discovery] Not using a regional authority. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [Region discovery] Not using a regional authority. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] [SaveTokenResponseAsync] Saving Id Token and Account in cache ... DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] === Token Acquisition finished successfully: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] AT expiration time: 7/2/2025 6:51:57 PM +00:00, scopes: Application.Read.All Device.ReadWrite.All DeviceManagementManagedDevices.Read.All Directory.AccessAsUser.All Directory.Read.All email Group.ReadWrite.All openid PrivilegedAccess.Read.AzureAD PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup profile RoleManagement.ReadWrite.Directory RoleManagementPolicy.Read.AzureADGroup Sites.Manage.All Sites.Read.All Sites.ReadWrite.All User.Read User.Read.All User.ReadWrite.All UserAuthenticationMethod.Read.All UserAuthenticationMethod.ReadWrite.All. source: Broker DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:47:57Z - 42fa0a31-2bdf-4c8b-8035-c30acd8a29bd] Fetched access token from host login.microsoftonline.com. DEBUG: InteractiveBrowserCredential.GetToken succeeded. Scopes: [ User.read ] ParentRequestId: ExpiresOn: 2025-07-02T18:51:57.3922023+00:00 Welcome to Microsoft Graph!

Connected via delegated access using 14d82eec-204b-4c2f-b7e8-296a70dab67e Readme: https://aka.ms/graph/sdk/powershell SDK Docs: https://aka.ms/graph/sdk/powershell/docs API Docs: https://aka.ms/graph/docs

NOTE: You can use the -NoWelcome parameter to suppress this message.

Eleavted (Non-Working) WS\system32> Connect-MGGraph -Scopes "User.read" -debug DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.read ] ParentRequestId:

Confirm Continue with this operation? [Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A DEBUG: Executing interactive authentication workflow inline. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] MSAL MSAL.Desktop with assembly version '4.61.3.0'. CorrelationId(5fb90c1f-59a3-4aec-be13-0bd41ac806a5) DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === InteractiveParameters Data === LoginHint provided: False User provided: False UseEmbeddedWebView: NotSpecified ExtraScopesToConsent: Prompt: select_account HasCustomWebUi: False DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === Request Data === Authority Provided? - True Scopes - User.read Extra Query Params Keys (space separated) - ApiId - AcquireTokenInteractive IsConfidentialClient - False SendX5C - False LoginHint ? False IsBrokerConfigured - True HomeAccountId - False CorrelationId - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5 UserAssertion set: False LongRunningOboCacheKey set: False Region configured: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] === Token Acquisition (InteractiveRequest) started: Scopes: User.read Authority Host: login.microsoftonline.com DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] [Instance Discovery] Instance discovery is enabled and will be performed DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] [Region discovery] Not using a regional authority. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Fetching instance discovery from the network from host login.microsoftonline.com.

DEBUG: Request [9d0b80e5-0561-4a1d-98db-0be20d0f0276] GET https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED x-client-SKU:REDACTED x-client-Ver:REDACTED x-client-OS:REDACTED client-request-id:REDACTED return-client-request-id:REDACTED x-app-name:REDACTED x-app-ver:REDACTED x-ms-client-request-id:9d0b80e5-0561-4a1d-98db-0be20d0f0276 x-ms-return-client-request-id:true User-Agent:azsdk-net-Identity.Broker/1.1.0 (.NET Framework 4.8.9300.0; Microsoft Windows 10.0.22631 ) client assembly: Azure.Identity.Broker DEBUG: Response [9d0b80e5-0561-4a1d-98db-0be20d0f0276] 200 OK (00.2s) Strict-Transport-Security:REDACTED X-Content-Type-Options:REDACTED Access-Control-Allow-Origin:REDACTED Access-Control-Allow-Methods:REDACTED client-request-id:REDACTED x-ms-request-id:faf35670-c868-41d2-9379-7810ee051200 x-ms-ests-server:REDACTED x-ms-srs:REDACTED Content-Security-Policy-Report-Only:REDACTED X-XSS-Protection:REDACTED Cache-Control:max-age=86400, private Content-Type:application/json; charset=utf-8 P3P:REDACTED Set-Cookie:REDACTED Date:Wed, 02 Jul 2025 17:45:56 GMT Content-Length:950 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Authority validation enabled? True. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Authority validation - is known env? True. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Broker is configured. Starting broker flow without knowing the broker installation app link. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [Runtime] WAM supported OS. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Can invoke broker. Will attempt to acquire token with broker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker] Calling SignInInteractivelyAsync this will show the account picker. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0001] WARNING SetAuthorityString:98 Initializing authority from string 'https://login.microsoftonline.com/common/' without authority type, defaulting to MsSts DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO SetCorrelationId:273 Set correlation ID: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1103 The original authority is 'https://login.microsoftonline.com/common' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] WARNING TryNormalizeRealm:2421 No HomeAccountId provided to normalize the realm DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1114 The normalized realm is '' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:215 Authority Realm: common DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0003] WARNING ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token reads will fail DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0003] WARNING ReadAccountById:227 Account id is empty - account not found DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO ErrorInternalImpl:116 Created an error: 55xnk, StatusInternal::UserCanceled, InternalEvent::None, Context 'User cancelled the Accounts Control Operation.' DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:393 Printing Telemetry for Correlation ID: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: start_time, Value: 2025-07-02T17:45:56.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: api_name, Value: SignInInteractively DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: was_request_throttled, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: authority_type, Value: Unknown DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: msal_version, Value: 1.1.0+local DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: api_status_code, Value: StatusInternal::UserCanceled DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: correlation_id, Value: 5fb90c1f-59a3-4aec-be13-0bd41ac806a5 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: broker_app_used, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: stop_time, Value: 2025-07-02T17:45:56.000Z DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: all_error_tags, Value: 55xnk DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: msalruntime_version, Value: 0.16.0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: original_authority, Value: https://login.microsoftonline.com/common DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: additional_query_parameters_count, Value: 0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: read_token_last_error, Value: missing required parameter DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: request_eligible_for_broker, Value: true DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: auth_flow, Value: Broker DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: ui_event_count, Value: 1 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: authorization_type, Value: Interactive DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: api_error_code, Value: 0 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: api_error_tag, Value: 55xnk DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: api_error_context, Value: User cancelled the Accounts Control Operation. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: is_successful, Value: false DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:401 Key: request_duration, Value: 126 DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:406 Printing Execution Flow: DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [MSAL:0004] INFO LogTelemetryData:414 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":2,"l":2},{"t":"4sufd","tid":2,"ts":2,"s":2,"l":2},{"t":"4s wgg","tid":2,"ts":2,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":2,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t" :"8dqim","tid":3,"ts":3,"l":2},{"t":"8dqkl","tid":3,"ts":9,"l":2,"a":9,"ie":0},{"t":"54uxd","tid":2,"ts":9,"l":2},{"t": "8dqkn","tid":4,"ts":115,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":115,"l":2,"a":9,"ie":1},{"t":"646u1","tid":4,"ts ":115,"l":2} DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker] Could not sign in interactively. Status: UserCanceled Context: User cancelled the Accounts Control Operation. Tag: 0x1f7d734a DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker] Processing WAM exception DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:56Z] [RuntimeBroker] authentication_canceled User canceled authentication. DEBUG: False MSAL 4.61.3.0 MSAL.Desktop 4.8 or later Windows 10 Enterprise [2025-07-02 17:45:57Z - 5fb90c1f-59a3-4aec-be13-0bd41ac806a5] Exception type: Microsoft.Identity.Client.MsalClientException , ErrorCode: authentication_canceled To see full exception details, enable PII Logging. See https://aka.ms/msal-net-logging at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.WamAdapters.HandleResponse(AuthResult authResult, AuthenticationRequestParameters authenticationRequestParameters, ILoggerAdapter logger, String errorMessage) at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.<SignInInteractivelyAsync>d__13.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.<AcquireTokenInteractiveAsync>d__12.MoveNext()

--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Broker.BrokerInteractiveRequestComponent.<FetchTokensAsync>d__9.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.<FetchTokensFromBrokerAsync>d__10.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.<GetTokenResponseAsync>d__11.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.<ExecuteAsync>d__9.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<<RunAsync>b__1>d.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Utils.StopwatchService.<MeasureCodeBlockAsync>d__4.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Microsoft.Identity.Client.Internal.Requests.RequestBase.<RunAsync>d__11.MoveNext() DEBUG: InteractiveBrowserCredential.Authenticate was unable to retrieve an access token. Scopes: [ User.read ] ParentRequestId: Exception: Azure.Identity.AuthenticationFailedException (0x80131500): InteractiveBrowserCredential authentication failed: User canceled authentication. ---> Microsoft.Identity.Client.MsalClientException (0x80131500): User canceled authentication.

Confirm InteractiveBrowserCredential authentication failed: User canceled authentication. [Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): A Connect-MGGraph : InteractiveBrowserCredential authentication failed: User canceled authentication. At line:1 char:1

  • Connect-MGGraph -Scopes "User.read" -debug
  •   + CategoryInfo          : NotSpecified: (:) [Connect-MgGraph], AuthenticationFailedException
  + FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Configuration

Windows 11 Enterprise 23H2

Other information

No response

patrmur avatar Jul 02 '25 18:07 patrmur

@timayabi2020 @peombwa @psignoret for awareness.

Zubi1989 avatar Jul 08 '25 22:07 Zubi1989

@patrmur can you please retry this with the latest version of the module (v2.34.0)

I'd like to understand the scope of impact here too, if I'm getting what you're saying this is an issue when running the PowerShell terminal as Admin with UAC disabled in Windows?

gavinbarron avatar Dec 20 '25 17:12 gavinbarron