SharedTokenCacheCredential authentication unavailable. Token acquisition failed for user xyz. Ensure that you have authenticated with a developer tool that supports Azure single sign on.

Open

#25,652 opened on Jul 25, 2024 1 comment 0 reactions 0 assignees View on GitHub

bug customer-reported needs-triage

Dominant language: C#
Stars: 4.8k
Forks: 4.3k
Avg merge: 2d 17h
Merged PRs (30d): 51

Description

### Description

The script is trying a "Get-AzADGroup" after signing into Azure with "Connect-AzAccount". Sign in seems to work - calling "Get-AzContext" retrieves the expected result. Calling "Get-AzADGroup" after signing in, generates this "SharedTokenCacheCredential authentication unavailable" error.

### Issue script & Debug output

```PowerShell
Script:

$AzTenantID = 'xyz'
$AzSubscriptionID = 'xxyyzz'

$DebugPreference='Continue'

write-host "Try with Service Account:"
$PWFileName = "zyx.cred"
$UserAccount = "zyx"
$SecureString = Get-Content $PWFilename | ConvertTo-SecureString
$Credential = New-Object System.Management.Automation.PSCredential -ArgumentList $UserAccount, $SecureString

Connect-AzAccount -Credential $Credential -Tenant $AzTenantID -debug
}
Get-Azcontext

Connect-AzAccount -Credential $Credential -Tenant $AzTenantID
$ObjectID = "93ba0f84-1545-4c18-830e-7ed6f89bd1da"
$AzAdGrp = Get-AzADGroup -ObjectID $ObjectID -debug
$AzAdGrp

get-module

Disconnect-AzAccount
###########################
Debug output for "Connect-AzAccount":
DEBUG: Initializing ConditionalAssemblyContext. PSEdition is [Desktop]. PSVersion is [5.1.17763.5933].
DEBUG: Initializing ConditionalAssemblyProvider. AssemblyRootPath is [C:\Program Files\WindowsPowerShell\Modules\Az.Accounts\3.0.2\StartupScripts\..\lib].
DEBUG: Got version 0 of Az
DEBUG: Got version 0 of Az.Accounts
DEBUG: 11:18:13 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:13 AM - ConnectAzureRmAccountCommand begin processing with ParameterSet 'UserWithCredential'.
DEBUG: 11:18:13 AM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:13 AM - [ConfigManager] Updated [EnableLoginByWam] to [False]. Scope = [CurrentUser], AppliesTo = []
WARNING: Authentication with a username and password at the command line is strongly discouraged. Use one of the recommended authentication methods based on your requirements. F
or additional information, visit https://go.microsoft.com/fwlink/?linkid=2276971.
DEBUG: 11:18:15 AM - [ConfigManager] Got nothing from [DefaultSubscriptionForLogin], Module = [], Cmdlet = []. Returning default value [].
DEBUG: 11:18:16 AM - Autosave setting from startup session: 'CurrentUser'
DEBUG: 11:18:16 AM - No autosave setting detected in environment variable 'AzContextAutoSave'.
DEBUG: 11:18:16 AM - Using Autosave scope 'CurrentUser'
WARNING: You may need to login again after updating "EnableLoginByWam".
DEBUG: 11:18:16 AM - [UsernamePasswordAuthenticator] Calling UsernamePasswordCredential.AuthenticateAsync - TenantId:'xyz-3b48-4625-afd2-2eb0587bf1d6', Scopes:'https://mana
gement.core.windows.net//.default', AuthorityHost:'https://login.microsoftonline.com', UserId:'zyx'
DEBUG: UsernamePasswordCredential.Authenticate invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] MSAL MSAL.CoreCLR w
ith assembly version '4.61.3.0'. CorrelationId(2a1f44f8-af34-4470-aac9-72f27e282b01)
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenByUsernamePassword
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 2a1f44f8-af34-4470-aac9-72f27e282b01
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] === Token Acquisiti
on (UsernamePasswordRequest) started:
Scopes: https://management.core.windows.net//.default
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] [Instance Discovery
] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Fetching instance d
iscovery from the network from host login.microsoftonline.com.
DEBUG: Response [6a5d013e-90d9-4814-9cc2-dbb7c92f2aea] 200 OK (00.2s)
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
client-request-id:REDACTED
x-ms-request-id:43916807-73dd-4465-892f-25c1f7579c00
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:max-age=86400, private
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:16 GMT
Content-Length:980
Content-Type:application/json; charset=utf-8

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Authority validatio
n enabled? True.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Authority validatio
n - is known env? True.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:16Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Sending request to
userrealm endpoint.
DEBUG: Request [e0ad601d-bf58-4c52-ab55-438fc55563f6] GET https://login.microsoftonline.com/common/userrealm/zyx?api-version=1.0
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
x-ms-client-request-id:e0ad601d-bf58-4c52-ab55-438fc55563f6
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [e0ad601d-bf58-4c52-ab55-438fc55563f6] 200 OK (00.1s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
x-ms-request-id:5173f283-c602-42ca-825a-f879e3a76500
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:16 GMT
Content-Length:354
Content-Disposition:REDACTED
Content-Type:application/json; charset=utf-8
Expires:-1

DEBUG: Request [45c1238d-4a36-48e4-a86e-59515dba8f34] GET https://autologon.microsoftazuread-sso.com/autoliv.com/winauth/trust/mex?client-request-id=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
x-ms-client-request-id:45c1238d-4a36-48e4-a86e-59515dba8f34
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [45c1238d-4a36-48e4-a86e-59515dba8f34] 200 OK (00.6s)
Pragma:no-cache
X-Content-Type-Options:REDACTED
x-ms-request-id:e68ad17e-7805-40a7-95f5-ba1f40bf0601
x-ms-ests-server:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:17 GMT
Content-Length:7208
Content-Type:text/xml; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:17Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Fetched and parsed
MEX
DEBUG: Request [ac69c545-0719-4377-9932-d6a8f0ed9342] POST https://autologon.microsoftazuread-sso.com/xyz.com/winauth/trust/2005/usernamemixed?client-request-id=REDACTED
SOAPAction:REDACTED
Content-Type:application/soap+xml; charset=utf-8
x-ms-client-request-id:ac69c545-0719-4377-9932-d6a8f0ed9342
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [ac69c545-0719-4377-9932-d6a8f0ed9342] 200 OK (01.5s)
Pragma:no-cache
X-Content-Type-Options:REDACTED
x-ms-request-id:263d6694-a8eb-47e8-9e0d-049c1fab6b00
x-ms-ests-server:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:18 GMT
Content-Length:2881
Content-Type:application/soap+xml; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Token of type 'urn:
oasis:names:tc:SAML:1.0:assertion' acquired from WS-Trust endpoint.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Token of type 'urn:
oasis:names:tc:SAML:1.0:assertion' acquired from WS-Trust endpoint.
DEBUG: Request [6f708050-6495-4c94-8ed7-348a9cbdcae5] POST https://login.microsoftonline.com/xyz-3b48-4625-afd2-2eb0587bf1d6/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
x-anchormailbox:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:6f708050-6495-4c94-8ed7-348a9cbdcae5
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [6f708050-6495-4c94-8ed7-348a9cbdcae5] 200 OK (00.2s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:5173f283-c602-42ca-825a-f8790da86500
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
x-ms-srs:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:18 GMT
Content-Length:5333
Content-Type:application/json; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Checking client inf
o returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Saving token respon
se to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] [SaveTokenResponseA
sync] Saving AT in cache and removing overlapping ATs...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Looking for scopes
for the authority in the cache which intersect with https://management.core.windows.net//.default
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Intersecting scope
entries count - 0
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Matching entries af
ter filtering by user - 0
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] [SaveTokenResponseA
sync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] [SaveTokenResponseA
sync] Saving RT in cache...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] IsLegacyAdalCacheEn
abled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Not writing FRT in
ADAL legacy cache.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] AT expiration time
: 7/25/2024 10:25:19 AM +00:00, scopes: https://management.core.windows.net//.default https://management.core.windows.net//user_impersonation. source: IdentityProvider
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 2a1f44f8-af34-4470-aac9-72f27e282b01] Fetched access toke
n from host login.microsoftonline.com.
DEBUG: 11:18:19 AM - [MsalAccessToken] Calling UsernamePasswordCredential.GetTokenAsync - Scopes:'https://management.core.windows.net//.default'
DEBUG: UsernamePasswordCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] MSAL MSAL.CoreCLR w
ith assembly version '4.61.3.0'. CorrelationId(8e40b5dd-62cd-4068-b48e-c7078b851059)
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] === AcquireTokenSil
ent Parameters ===
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] LoginHint provided:
False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] Account provided: T
rue
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] ForceRefresh: False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 8e40b5dd-62cd-4068-b48e-c7078b851059
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] === Token Acquisiti
on (SilentRequest) started:
Scopes: https://management.core.windows.net//.default
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] Access token is not
expired. Returning the found cache entry. [Current time (07/25/2024 09:18:19) - Expiration Time (07/25/2024 10:25:19 +00:00) - Extended Expiration Time (07/25/2024 10:25:19 +00
:00)]
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] Returning access to
ken found in cache. RefreshOn exists ? False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 8e40b5dd-62cd-4068-b48e-c7078b851059] AT expiration time
: 7/25/2024 10:25:19 AM +00:00, scopes: https://management.core.windows.net//.default https://management.core.windows.net//user_impersonation. source: Cache
DEBUG: UsernamePasswordCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId: ExpiresOn: 2024-07-25T10:25:19.0000000+00:00
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions?api-version=2021-01-01

Headers:
x-ms-client-request-id : 9f23a828-a1cb-416e-88d7-67ac2193f96d
accept-language : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma : no-cache
x-ms-ratelimit-remaining-tenant-reads: 249
x-ms-request-id : c1028867-be2a-4622-8af3-5dc146c0e3d5
x-ms-correlation-request-id : c1028867-be2a-4622-8af3-5dc146c0e3d5
x-ms-routing-request-id : WESTEUROPE:20240725T091819Z:c1028867-be2a-4622-8af3-5dc146c0e3d5
Strict-Transport-Security : max-age=31536000; includeSubDomains
X-Content-Type-Options : nosniff
X-Cache : CONFIG_NOCACHE
X-MSEdge-Ref : Ref A: 0D6583AADCE54E74B182EE2026C5BDC3 Ref B: AMS231022012009 Ref C: 2024-07-25T09:18:19Z
Cache-Control : no-cache
Date : Thu, 25 Jul 2024 09:18:18 GMT

Body:
{
"value": [
{
"id": "/subscriptions/f0321756-460f-4749-8bd4-526f98fe3feb",
"authorizationSource": "RoleBased",
"managedByTenants": [
{
"tenantId": "2f4a9838-26b7-47ee-be60-ccc1fdec5953"
},
{
"tenantId": "5fccd68a-e65e-46ae-96b1-2d896d680249"
}
],
"subscriptionId": "f0321756-460f-4749-8bd4-526f98fe3feb",
"tenantId": "xyz-3b48-4625-afd2-2eb0587bf1d6",
"displayName": "Production",
"state": "Enabled",
"subscriptionPolicies": {
"locationPlacementId": "Public_2014-09-01",
"quotaId": "EnterpriseAgreement_2014-09-01",
"spendingLimit": "Off"
}
},
{
"id": "/subscriptions/xyz-eb59-4876-a1f0-635c30e2507e",
"authorizationSource": "RoleBased",
"managedByTenants": [
{
"tenantId": "2f4a9838-26b7-47ee-be60-ccc1fdec5953"
},
{
"tenantId": "5fccd68a-e65e-46ae-96b1-2d896d680249"
}
],
"subscriptionId": "xyz-eb59-4876-a1f0-635c30e2507e",
"tenantId": "xyz-3b48-4625-afd2-2eb0587bf1d6",
"displayName": "Development",
"state": "Enabled",
"subscriptionPolicies": {
"locationPlacementId": "Public_2014-09-01",
"quotaId": "EnterpriseAgreement_2014-09-01",
"spendingLimit": "Off"
}
}
],
"count": {
"type": "Total",
"value": 2
}
}

DEBUG: 11:18:19 AM - [SilentAuthenticator] Calling SharedTokenCacheCredential.GetTokenAsync - TenantId:'xyz-3b48-4625-afd2-2eb0587bf1d6', Scopes:'https://management.core.wi
ndows.net//.default', AuthorityHost:'https://login.microsoftonline.com/', UserId:'zyx'
DEBUG: SharedTokenCacheCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - e270b254-9df6-4471-96a3-a194b064d835] IsLegacyAdalCacheEn
abled: yes
WARNING: TenantId 'xyz-3b48-4625-afd2-2eb0587bf1d6' contains more than one active subscription. First one will be selected for further use. To select another subscription,
use Set-AzContext.
WARNING: To override which subscription Connect-AzAccount selects by default, use `Update-AzConfig -DefaultSubscriptionForLogin 00000000-0000-0000-0000-000000000000`. Go to http
s://go.microsoft.com/fwlink/?linkid=2200610 for more information.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - e270b254-9df6-4471-96a3-a194b064d835] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - e270b254-9df6-4471-96a3-a194b064d835] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - e270b254-9df6-4471-96a3-a194b064d835] IsLegacyAdalCacheEn
abled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - e270b254-9df6-4471-96a3-a194b064d835] IsLegacyAdalCacheEn
abled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z] Found 1 cache accounts and 0 broker accounts
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z] Returning 1 accounts
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] MSAL MSAL.CoreCLR w
ith assembly version '4.61.3.0'. CorrelationId(5d79089f-2a46-474a-b812-66b5239b35e5)
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] === AcquireTokenSil
ent Parameters ===
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] LoginHint provided:
False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] Account provided: T
rue
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] ForceRefresh: False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 5d79089f-2a46-474a-b812-66b5239b35e5
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] === Token Acquisiti
on (SilentRequest) started:
Scopes: https://management.core.windows.net//.default
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] Access token is not
expired. Returning the found cache entry. [Current time (07/25/2024 09:18:19) - Expiration Time (07/25/2024 10:25:19 +00:00) - Extended Expiration Time (07/25/2024 10:25:19 +00
:00)]
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] Returning access to
ken found in cache. RefreshOn exists ? False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:19Z - 5d79089f-2a46-474a-b812-66b5239b35e5] AT expiration time
: 7/25/2024 10:25:19 AM +00:00, scopes: https://management.core.windows.net//.default https://management.core.windows.net//user_impersonation. source: Cache
DEBUG: SharedTokenCacheCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId: ExpiresOn: 2024-07-25T10:25:19.0000000+00:00
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions?api-version=2021-01-01

Headers:
x-ms-client-request-id : 9f23a828-a1cb-416e-88d7-67ac2193f96d
accept-language : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma : no-cache
x-ms-ratelimit-remaining-tenant-reads: 249
x-ms-request-id : 20287899-0b29-432c-8d14-252b9ac306af
x-ms-correlation-request-id : 20287899-0b29-432c-8d14-252b9ac306af
x-ms-routing-request-id : WESTEUROPE:20240725T091820Z:20287899-0b29-432c-8d14-252b9ac306af
Strict-Transport-Security : max-age=31536000; includeSubDomains
X-Content-Type-Options : nosniff
X-Cache : CONFIG_NOCACHE
X-MSEdge-Ref : Ref A: A84CC4786F1B446A8E766AF5C5DCF97E Ref B: AMS231032608033 Ref C: 2024-07-25T09:18:20Z
Cache-Control : no-cache
Date : Thu, 25 Jul 2024 09:18:19 GMT

DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].

DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [LoginExperienceV2], Module = [], Cmdlet = []. Returning default value [On].
DEBUG: 11:18:20 AM - [ConfigManager] Got [False] from [EnableLoginByWam], Module = [], Cmdlet = [].
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplayRegionIdentified], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [CheckForUpgrade], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: AzureQoSEvent: Module: Az.Accounts:3.0.2; CommandName: Connect-AzAccount; PSVersion: 5.1.17763.5933; IsSuccess: True; Duration: 00:00:09.5192861; SanitizeDuration: 00:00
:00.0407047
DEBUG: 11:18:20 AM - [ConfigManager] Got [True] from [EnableDataCollection], Module = [], Cmdlet = [].
DEBUG: 11:18:20 AM - ConnectAzureRmAccountCommand end processing.
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - GetAzureRMContextCommand begin processing with ParameterSet 'GetSingleContext'.
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplayRegionIdentified], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [CheckForUpgrade], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: AzureQoSEvent: Module: Az.Accounts:3.0.2; CommandName: Get-AzContext; PSVersion: 5.1.17763.5933; IsSuccess: True; Duration: 00:00:00.0176952; SanitizeDuration: 00:00:00.
0040381
DEBUG: 11:18:20 AM - [ConfigManager] Got [True] from [EnableDataCollection], Module = [], Cmdlet = [].
DEBUG: 11:18:20 AM - GetAzureRMContextCommand end processing.
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - ConnectAzureRmAccountCommand begin processing with ParameterSet 'UserWithCredential'.
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:18:20 AM - [ConfigManager] Updated [EnableLoginByWam] to [False]. Scope = [CurrentUser], AppliesTo = []
WARNING: Authentication with a username and password at the command line is strongly discouraged. Use one of the recommended authentication methods based on your requirements. F
or additional information, visit https://go.microsoft.com/fwlink/?linkid=2276971.
DEBUG: 11:18:20 AM - [ConfigManager] Got nothing from [DefaultSubscriptionForLogin], Module = [], Cmdlet = []. Returning default value [].
DEBUG: 11:18:20 AM - Autosave setting from startup session: 'CurrentUser'
DEBUG: 11:18:20 AM - No autosave setting detected in environment variable 'AzContextAutoSave'.
DEBUG: 11:18:20 AM - Using Autosave scope 'CurrentUser'
WARNING: You may need to login again after updating "EnableLoginByWam".
DEBUG: 11:18:20 AM - [UsernamePasswordAuthenticator] Calling UsernamePasswordCredential.AuthenticateAsync - TenantId:'xyz-3b48-4625-afd2-2eb0587bf1d6', Scopes:'https://mana
gement.core.windows.net//.default', AuthorityHost:'https://login.microsoftonline.com', UserId:'zyx'
DEBUG: UsernamePasswordCredential.Authenticate invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] MSAL MSAL.CoreCLR w
ith assembly version '4.61.3.0'. CorrelationId(07e76c31-5b5f-4821-9f88-15b3d89843f1)
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenByUsernamePassword
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 07e76c31-5b5f-4821-9f88-15b3d89843f1
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] === Token Acquisiti
on (UsernamePasswordRequest) started:
Scopes: https://management.core.windows.net//.default
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] [Instance Discovery
] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Sending request to
userrealm endpoint.
DEBUG: Request [c2fe10ea-e96f-494f-8eab-587fe6caffae] GET https://login.microsoftonline.com/common/userrealm/zyx?api-version=1.0
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
x-ms-client-request-id:c2fe10ea-e96f-494f-8eab-587fe6caffae
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [c2fe10ea-e96f-494f-8eab-587fe6caffae] 200 OK (00.1s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
x-ms-request-id:aa473051-2013-46a6-aa5f-2d3b0f33a400
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:19 GMT
Content-Length:354
Content-Disposition:REDACTED
Content-Type:application/json; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] User detected as 'F
ederated'.
DEBUG: Request [f9066f5f-5570-4311-92de-a9ae864a50e2] GET https://autologon.microsoftazuread-sso.com/xyz.com/winauth/trust/mex?client-request-id=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
x-ms-client-request-id:f9066f5f-5570-4311-92de-a9ae864a50e2
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [f9066f5f-5570-4311-92de-a9ae864a50e2] 200 OK (00.2s)
Pragma:no-cache
X-Content-Type-Options:REDACTED
x-ms-request-id:b83e2ebb-6dc0-4954-becb-2e73c23d1301
x-ms-ests-server:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:20 GMT
Content-Length:7208
Content-Type:text/xml; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:20Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Fetched and parsed
MEX
DEBUG: Request [c0f00cc5-63b4-420b-9cc8-5151c68da4fc] POST https://autologon.microsoftazuread-sso.com/xyz.com/winauth/trust/2005/usernamemixed?client-request-id=REDACTED
SOAPAction:REDACTED
Content-Type:application/soap+xml; charset=utf-8
x-ms-client-request-id:c0f00cc5-63b4-420b-9cc8-5151c68da4fc
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [c0f00cc5-63b4-420b-9cc8-5151c68da4fc] 200 OK (00.5s)
Pragma:no-cache
X-Content-Type-Options:REDACTED
x-ms-request-id:aa35cd15-ccb9-45dd-ad65-c6df22041401
x-ms-ests-server:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:20 GMT
Content-Length:2881
Content-Type:application/soap+xml; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Token of type 'urn:
oasis:names:tc:SAML:1.0:assertion' acquired from WS-Trust endpoint.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Token of type 'urn:
oasis:names:tc:SAML:1.0:assertion' acquired from WS-Trust endpoint.
DEBUG: Request [b9051208-e20c-4f37-a4c1-ff02e1d89e14] POST https://login.microsoftonline.com/xyz-3b48-4625-afd2-2eb0587bf1d6/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
x-anchormailbox:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:b9051208-e20c-4f37-a4c1-ff02e1d89e14
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.12.0 (.NET Framework 4.8.4729.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [b9051208-e20c-4f37-a4c1-ff02e1d89e14] 200 OK (00.3s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:1120f265-824b-4e40-bf52-f91811970501
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
x-ms-srs:REDACTED
X-XSS-Protection:REDACTED
Cache-Control:no-store, no-cache
P3P:REDACTED
Set-Cookie:REDACTED
Date:Thu, 25 Jul 2024 09:18:20 GMT
Content-Length:5331
Content-Type:application/json; charset=utf-8
Expires:-1

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Checking client inf
o returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Saving token respon
se to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] [SaveTokenResponseA
sync] Saving AT in cache and removing overlapping ATs...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Looking for scopes
for the authority in the cache which intersect with https://management.core.windows.net//.default
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Intersecting scope
entries count - 1
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Matching entries af
ter filtering by user - 1
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] [SaveTokenResponseA
sync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] [SaveTokenResponseA
sync] Saving RT in cache...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] IsLegacyAdalCacheEn
abled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Not writing FRT in
ADAL legacy cache.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] AT expiration time
: 7/25/2024 10:36:02 AM +00:00, scopes: https://management.core.windows.net//.default https://management.core.windows.net//user_impersonation. source: IdentityProvider
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 07e76c31-5b5f-4821-9f88-15b3d89843f1] Fetched access toke
n from host login.microsoftonline.com.
DEBUG: 11:18:21 AM - [MsalAccessToken] Calling UsernamePasswordCredential.GetTokenAsync - Scopes:'https://management.core.windows.net//.default'
DEBUG: UsernamePasswordCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] MSAL MSAL.CoreCLR w
ith assembly version '4.61.3.0'. CorrelationId(632314e7-23a6-4d5a-bbff-eab90ece5067)
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] === AcquireTokenSil
ent Parameters ===
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] LoginHint provided:
False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] Account provided: T
rue
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] ForceRefresh: False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 632314e7-23a6-4d5a-bbff-eab90ece5067
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] === Token Acquisiti
on (SilentRequest) started:
Scopes: https://management.core.windows.net//.default
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] Access token is not
expired. Returning the found cache entry. [Current time (07/25/2024 09:18:21) - Expiration Time (07/25/2024 10:36:02 +00:00) - Extended Expiration Time (07/25/2024 10:36:02 +00
:00)]
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] Returning access to
ken found in cache. RefreshOn exists ? False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] [Region discovery]
Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET Framework 4.8.4729.0 Microsoft Windows 10.0.17763 [2024-07-25 09:18:21Z - 632314e7-23a6-4d5a-bbff-eab90ece5067] AT expiration time
: 7/25/2024 10:36:02 AM +00:00, scopes: https://management.core.windows.net//.default https://management.core.windows.net//user_impersonation. source: Cache
DEBUG: UsernamePasswordCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId: ExpiresOn: 2024-07-25T10:36:02.0000000+00:00
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions?api-version=2021-01-01

Headers:
x-ms-client-request-id : 1f1ae493-8c55-4c45-ae0d-1b43eff2e74c
accept-language : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma : no-cache
x-ms-ratelimit-remaining-tenant-reads: 249
x-ms-request-id : e3f2a12a-79e5-4235-9ab5-d08a2d6a3db3
x-ms-correlation-request-id : e3f2a12a-79e5-4235-9ab5-d08a2d6a3db3
x-ms-routing-request-id : WESTEUROPE:20240725T091821Z:e3f2a12a-79e5-4235-9ab5-d08a2d6a3db3
Strict-Transport-Security : max-age=31536000; includeSubDomains
X-Content-Type-Options : nosniff
X-Cache : CONFIG_NOCACHE
X-MSEdge-Ref : Ref A: 9E80E3268F754C5CAE7CC90AE57DCD47 Ref B: AMS231032607053 Ref C: 2024-07-25T09:18:21Z
Cache-Control : no-cache
Date : Thu, 25 Jul 2024 09:18:21 GMT

WARNING: TenantId 'xyz-3b48-4625-afd2-2eb0587bf1d6' contains more than one active subscription. First one will be selected for further use. To select another subscription,
use Set-AzContext.
WARNING: To override which subscription Connect-AzAccount selects by default, use `Update-AzConfig -DefaultSubscriptionForLogin 00000000-0000-0000-0000-000000000000`. Go to http
s://go.microsoft.com/fwlink/?linkid=2200610 for more information.
DEBUG: 11:18:21 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
```

### Environment data

```PowerShell
Name Value
---- -----
PSVersion 5.1.17763.5933
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.17763.5933
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
```

### Module versions

```PowerShell
Name : Az.Accounts
Version : 3.0.2

Name : Az.Resources
Version : 7.2.0

Name : ISE
Version : 1.0.0.0

Name : Microsoft.PowerShell.Management
Version : 3.1.0.0

Name : Microsoft.PowerShell.Security
Version : 3.0.0.0

Name : Microsoft.PowerShell.Utility
Version : 3.1.0.0

Name : Microsoft.WSMan.Management
Version : 3.0.0.0
```

### Error output

```PowerShell
DEBUG: 11:36:10 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:36:10 AM - ResolveError begin processing with ParameterSet 'AnyErrorParameterSet'.
DEBUG: 11:36:10 AM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:36:10 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].

HistoryId: 1

Message : SharedTokenCacheCredential authentication unavailable. Token acquisition failed for user zyx. Ensure that you have authenticated with a
developer tool that supports Azure single sign on.
realm:
authorization_uri: https://login.microsoftonline.com/common/oauth2/authorize
client_id: 00000003-0000-0000-c000-000000000000
error_description: Continuous access evaluation resulted in challenge with result: InteractionRequired and code: LocationConditionEvaluationSatisfied
error: insufficient_claims
claims: eyJhY2Nlc3NfdG9rZW4iOnsibmJmIjp7ImVzc2VudGlhbCI6dHJ1ZSwidmFsdWUiOiIxNzIxODk5MTExIn0sInhtc19ycF9pcGFkZHIiOnsidmFsdWUiOiIxNTUuMTkwLjM0LjQifX19

StackTrace : at Microsoft.Azure.Commands.Common.ContextAdapter.d__13.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.Commands.Common.ContextAdapter.<>c__DisplayClass10_0.<b__0>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.Commands.Common.ContextAdapter.<>c__DisplayClass9_0.<b__0>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Module.d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.MSGraph.d__80.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.MSGraph.d__80.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.MSGraph.d__78.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Cmdlets.GetAzADGroup_Get.d__74.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Microsoft.Azure.PowerShell.Cmdlets.Resources.MSGraph.Cmdlets.GetAzADGroup_Get.d__74.MoveNext()
Exception : Azure.Identity.AuthenticationFailedException
InvocationInfo : {Get-AzADGroup_Get}
Line : Az.MSGraph.internal\Get-AzAdGroup @PSBoundParameters

Position : At C:\Program Files\WindowsPowerShell\Modules\Az.Resources\7.2.0\MSGraph.Autorest\custom\Get-AzADGroup.ps1:179 char:9
+ Az.MSGraph.internal\Get-AzAdGroup @PSBoundParameters
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId : 1

DEBUG: 11:36:11 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
Message : SharedTokenCacheCredential authentication unavailable. Token acquisition failed for user zyx. Ensure that you have authenticated with a
developer tool that supports Azure single sign on.
StackTrace : at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Azure.Identity.CredentialDiagnosticScope.FailWrapAndThrow(Exception ex, String additionalMessage, Boolean isCredentialUnavailable)
at Azure.Identity.SharedTokenCacheCredential.d__31.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.SharedTokenCacheCredential.d__30.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Authenticators.MsalAccessToken.d__37.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.Commands.Common.ContextAdapter.d__13.MoveNext()
Exception : Azure.Identity.CredentialUnavailableException
InvocationInfo : {Get-AzADGroup_Get}
Line : Az.MSGraph.internal\Get-AzAdGroup @PSBoundParameters

Position : At C:\Program Files\WindowsPowerShell\Modules\Az.Resources\7.2.0\MSGraph.Autorest\custom\Get-AzADGroup.ps1:179 char:9
+ Az.MSGraph.internal\Get-AzAdGroup @PSBoundParameters
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId : 1

DEBUG: 11:36:11 AM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
Message : No Refresh Token found in the cache.
StackTrace : at Microsoft.Identity.Client.Internal.Requests.Silent.SilentRequest.d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<b__1>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Utils.StopwatchService.d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.d__11.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Identity.Client.ApiConfig.Executors.ClientApplicationBaseExecutor.d__2.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.AbstractAcquireTokenParameterBuilderExtensions.d__0`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.MsalPublicClient.d__11.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.MsalPublicClient.d__10.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.SharedTokenCacheCredential.d__31.MoveNext()
Exception : Microsoft.Identity.Client.MsalUiRequiredException
InvocationInfo : {Get-AzADGroup_Get}
Line : Az.MSGraph.internal\Get-AzAdGroup @PSBoundParameters

Position : At C:\Program Files\WindowsPowerShell\Modules\Az.Resources\7.2.0\MSGraph.Autorest\custom\Get-AzADGroup.ps1:179 char:9
+ Az.MSGraph.internal\Get-AzAdGroup @PSBoundParameters
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId : 1

DEBUG: 11:36:11 AM - [ConfigManager] Got nothing from [DisplayRegionIdentified], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 11:36:11 AM - [ConfigManager] Got nothing from [CheckForUpgrade], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: AzureQoSEvent: Module: Az.Accounts:3.0.2; CommandName: Resolve-AzError; PSVersion: 5.1.17763.5933; IsSuccess: True; Duration: 00:00:00.2740728; SanitizeDuration: 00:00:0
0.0441658
DEBUG: 11:36:11 AM - [ConfigManager] Got [True] from [EnableDataCollection], Module = [], Cmdlet = [].
DEBUG: 11:36:11 AM - ResolveError end processing.
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

SharedTokenCacheCredential authentication unavailable. Token acquisition failed for user xyz. Ensure that you have authenticated with a developer tool that supports Azure single sign on.

Description

Contributor guide

Assessment

Get new issues in your inbox