[QUERY] AuthenticateAsync() causes error invalid_client AADSTS650057

[DanielHWe]

Library name and version

Azure.Identity 1.13.1

Query/Question

I tryed to persist a AuthenticationRecord like described in section "Silently authenticate a user with AuthenticationRecord and TokenCachePersistenceOptions" of TokenCache

But I always ending in getting the error Error details: error invalid_client error_description: AADSTS650057: Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration.

Eroor shown in Browser by calling AuthenticationRecord authRecord = await credential.AuthenticateAsync();

I tryed to change the scope and the API Permissions in entry, currently I have File.ReadWrite.All, Application.ReadWrite.All, Directory.ReadWrite.All, AuthenticationContext.Read.All, offline_access, openid, profile, User.read.

But that did not help.

I have a WPF Desktop App and how may I able to Silently authenticate a user, so he must not login within the browser each time the application is restarted. (Currently I'm using InteractiveBrowserCredentialOptions)

Environment

Windows 11, .Net 8, WPF Desktop App

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[christothes]

Hi @DanielHWe -
Are you able to get a token interactively without persisting the AuthenticationRecord or does this error only occur when trying the silent auth flow? If the error occurs both ways, this sounds like an Entra ID configuration issue. If interactive authentication works but silent doesn't, can you provide a minimal code snippet that reproduces the problem including any relevant details about your app registration configuration?

[github-actions]

Hi @DanielHWe. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.