Azure / Azure/azure-powershell
Az AD cmdlets return a "Continuous Access Evaluation" error from Azure Pipeline
- Dominant language
- C#
- Stars
- 4.8k
- Forks
- 4.3k
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 51
Description
### Description
Running the Azure DevOps pipeline as yaml code and getting the error message "##[error][InvalidAuthenticationToken] : Continuous access evaluation resulted in challenge with result: InteractionRequired and code: LocationConditionEvaluationSatisfied"
```
trigger: none
pool:
vmImage: 'windows-latest'
steps:
- task: AzurePowerShell@5
displayName: 'Get-AzADServicePrincipal - AzurePowerShell@5'
inputs:
azureSubscription: 'DEV'
ScriptType: 'InlineScript'
azurePowerShellVersion: 'LatestVersion'
#preferredAzurePowerShellVersion: '12.0.0'
pwsh: true
Inline: |
$ServicePrincipaldisplayName = 'test-app01'
$sp = Get-AzADServicePrincipal -DisplayName $ServicePrincipaldisplayName
if (!$sp) {
throw 'Unable to get service principal'
}
$objId = $sp.Id
Write-Host "ServicePrincipal ObjectId: $objId"
```
### Issue script & Debug output
```PowerShell
##[debug]Error record:
##[debug]Get-AzADServicePrincipal_List: C:\Modules\az_12.5.0\Az.Resources\7.6.0\MSGraph.Autorest\custom\Get-AzADServicePrincipal.ps1:221
##[debug]Line |
##[debug] 221 | Az.MSGraph.internal\Get-AzADServicePrincipal @PSBoundParameters
##[debug] | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
##[debug] | Continuous access evaluation resulted in challenge with result: InteractionRequired and code:
##[debug] | LocationConditionEvaluationSatisfied
##[debug]
##[debug]Script stack trace:
##[debug]at Get-AzADServicePrincipal, C:\Modules\az_12.5.0\Az.Resources\7.6.0\MSGraph.Autorest\internal\ProxyCmdletDefinitions.ps1: line 1692
##[debug]at Get-AzADServicePrincipal, C:\Modules\az_12.5.0\Az.Resources\7.6.0\MSGraph.Autorest\custom\Get-AzADServicePrincipal.ps1: line 221
##[debug]at Get-AzADServicePrincipal, C:\Modules\az_12.5.0\Az.Resources\7.6.0\MSGraph.Autorest\exports\ProxyCmdletDefinitions.ps1: line 5283
##[debug]at , D:\a\_temp\e7f9b4db-0e3e-4623-bf0c-c22df142d66a.ps1: line 54
##[debug]at , : line 1
##[debug]Exception:
##[debug]System.Exception: [InvalidAuthenticationToken] : Continuous access evaluation resulted in challenge with result: InteractionRequired and code: LocationConditionEvaluationSatisfied
##[error][InvalidAuthenticationToken] : Continuous access evaluation resulted in challenge with result: InteractionRequired and code: LocationConditionEvaluationSatisfied
##[debug]Processed: ##vso[task.logissue source=TaskInternal;type=error][InvalidAuthenticationToken] : Continuous access evaluation resulted in challenge with result: InteractionRequired and code: LocationConditionEvaluationSatisfied
##[debug]Exit code: 1
##[debug]Leaving Invoke-VstsTool.
##[error]PowerShell exited with code '1'.
##[debug]Processed: ##vso[task.logissue correlationId=3371b477-c5aa-4ccb-9398-d389e753df72;source=TaskInternal;type=error]PowerShell exited with code '1'.
##[debug]Processed: ##vso[task.complete result=Failed]Error detected
```
### Environment data
```PowerShell
Starting: Get-AzADServicePrincipal - AzurePowerShell@5
==============================================================================
Task : Azure PowerShell
Description : Run a PowerShell script within an Azure environment
Version : 5.257.0
Author : Microsoft Corporation
Help : https://aka.ms/azurepowershelltroubleshooting
==============================================================================
```
### Module versions
```PowerShell
Name : Az.Accounts
Path : C:\Modules\az_12.5.0\Az.Accounts\5.1.1\Az.Accounts.psm1
Description : Microsoft Azure PowerShell - Accounts credential management cmdlets for Azure Resource Manager in
Windows PowerShell and PowerShell Core.
For more information on account credential management, please visit the following:
https://learn.microsoft.com/powershell/azure/authenticate-azureps
Guid : 17a2feff-488b-47f9-8729-e2cec094624c
Version : 5.1.1
ModuleBase : C:\Modules\az_12.5.0\Az.Accounts\5.1.1
ModuleType : Script
PrivateData : {[PSData, System.Collections.Hashtable]}
AccessMode : ReadWrite
ExportedAliases : {[Add-AzAccount, Add-AzAccount], [Get-AzDomain, Get-AzDomain], [Invoke-AzRest, Invoke-AzRest],
[Login-AzAccount, Login-AzAccount]…}
ExportedCmdlets : {[Add-AzEnvironment, Add-AzEnvironment], [Clear-AzConfig, Clear-AzConfig], [Clear-AzContext,
Clear-AzContext], [Clear-AzDefault, Clear-AzDefault]…}
ExportedFunctions : {}
ExportedVariables : {}
NestedModules : {Microsoft.Azure.PowerShell.Cmdlets.Accounts}
```
### Error output
```PowerShell
```
Contributor guide
Assessment
This issue has not been assessed yet.