Connect-MgGraph fails when authenticating to a customer tenant via GDAP from Windows devices. Authentication is routed through WAM / the Windows broker and cannot be forced to a browser. The same GDAP account works fine from macOS, and connecting to the home tenant from the same Windows device also works.
Reproducible across multiple Windows devices and multiple user accounts.
Connect-MgGraph should successfully authenticate against a customer tenant via GDAP from a Windows device, the same way it does from macOS and the same way it does against the home tenant.
Use device code auth (Connect-MgGraph -UseDeviceCode).
Use a native / non-GDAP account in the target tenant.
Downgrade Microsoft.Graph module to v2.25.0
Click to expand log
```
PS C:\Users\enduser> $TENANT_ID = "XXXXXX-XXX-XXXX-XXX-XXXXXXX"
PS C:\Users\enduser> Connect-MgGraph -Scopes "Directory.Read.All" -TenantId $TENANT_ID -debug
WARNING: Note: Sign in by Web Account Manager (WAM) is enabled by default on Windows. If using an embedded terminal, the interactive browser window may be hidden behind other windows.
Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): a
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ Directory.Read.All ] ParentRequestId:
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] MSAL MSAL.CoreCLR with assembly version '4.82.1.0'. CorrelationId(6b5e2275-f39c-48d5-9715-b5f29709d97b)
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b]
=== Request Data ===
Authority Provided? - True
Scopes - Directory.Read.All
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 6b5e2275-f39c-48d5-9715-b5f29709d97b
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
FMI Path:
Credential FMI Path:
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] === Token Acquisition (InteractiveRequest) started:
Scopes: Directory.Read.All
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Fetching instance discovery from the network from host login.microsoftonline.com.
DEBUG: Request [39be002c-d711-4632-af1e-84e02d147569] GET https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-ms-client-request-id:39be002c-d711-4632-af1e-84e02d147569
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity.Broker/1.4.0 (.NET 10.0.6; Microsoft Windows 10.0.26100)
client assembly: Azure.Identity.Broker
DEBUG: Response [39be002c-d711-4632-af1e-84e02d147569] 200 OK (00.0s)
Cache-Control:max-age=86400, private
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
P3P:REDACTED
client-request-id:REDACTED
x-ms-request-id:69a23841-fa99-48a4-b2fe-010934840f00
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
Content-Security-Policy-Report-Only:REDACTED
X-XSS-Protection:REDACTED
Set-Cookie:REDACTED
Date:Thu, 14 May 2026 05:25:37 GMT
Content-Type:application/json; charset=utf-8
Content-Length:980
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Broker is configured. Starting broker flow without knowing the broker installation app link.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [Runtime] Broker supported OS.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [RuntimeBroker] Calling SignInInteractivelyAsync this will show the account picker.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0001] INFO SetAuthorityUri:78 Initializing authority from URI 'https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX/' without authority type, defaulting to MsSts
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO SetCorrelationId:259 Set correlation ID: 6b5e2275-f39c-48d5-9715-b5f29709d97b
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1191 The original authority is 'https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1202 The normalized realm is ''
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:200 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:200 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:223 Authority Realm: XXXXXX-XXX-XXXX-XXX-XXXXXXX
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] WARNING TryEnqueueMsaDeviceCredentialAcquisitionAndContinue:1084 MsaDeviceOperationProvider is not available. Not attempting to register the device.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0003] WARNING ReturnResponseDueToMissingParameter:742 Missing Required parameters, but found no account to return.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0003] WARNING ReadAccountById:273 Account id is empty - account not found
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0003] INFO GetCurrentWindowHandleForUIFlow:495 Specified brokerWindowHandle is valid.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:38Z] [MSAL:0004] INFO CreateRequestForProviderWithProperties:862 Client-xtra-sku: MSAL.CoreCLR|4.82.1.0,|0.19.4,|,|,|1.1.0+local
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:38Z] [MSAL:0004] INFO AddClientSystemInfoToRequest:1248 Client-xtra-sku: MSAL.CoreCLR|4.82.1.0,|0.19.4,|,|,|1.1.0+local
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] ERROR ErrorInternalImpl:134 Created an error: 7q20j, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 3399614467, Context '(pii)'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:456 Printing Telemetry for Correlation ID: 6b5e2275-f39c-48d5-9715-b5f29709d97b
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: start_time, Value: 2026-05-14T05:25:37.000Z
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_name, Value: SignInInteractively
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_status_code, Value: StatusInternal::InteractionRequired
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: correlation_id, Value: 6b5e2275-f39c-48d5-9715-b5f29709d97b
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: broker_app_used, Value: true
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: stop_time, Value: 2026-05-14T05:26:18.000Z
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: all_error_tags, Value: 7q20j
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: msalruntime_version, Value: 0.19.4
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: original_authority, Value: https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: additional_query_parameters_count, Value: 2
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: read_token_last_error, Value: missing required parameter
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: ui_event_count, Value: 1
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: wam_telemetry, Value: {"ui_visible":true,"scope":"Directory.Read.All offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":"https://login.windows.net","prompt_behavior":"select_account","oauth_error_code":"invalid_grant","is_guest_user_logon_token_request":false,"is_guest_user_logon_session":false,"is_guest_resource_scenario":false,"http_status":400,"http_event_count":12,"http_content_type":"application/aad.wam.ui","http_content_size":-1,"device_join":"aadj","correlation_id":"{6b5e2275-f39c-48d5-9715-b5f29709d97b}","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.26100.8115","authority":"https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX","api_error_code":-895352829,"account_join_on_start":"primary","account_join_on_end":"secondary","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":3,"is_cached":0}
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: authorization_type, Value: Interactive
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_error_code, Value: 3399614467
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_error_tag, Value: 7q20j
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_error_context, Value: (pii)
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: is_successful, Value: false
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: request_duration, Value: 40981
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:469 Printing Execution Flow:
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:477 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":0,"l":2},{"t":"4sufd","tid":2,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":2,"ts":0,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t":"8dqkl","tid":3,"ts":2,"l":2,"a":9,"ie":0},{"t":"4ly8o","tid":3,"ts":2,"l":2},{"t":"4scq4","tid":4,"ts":2,"l":2},{"t":"4wqnh","tid":4,"ts":2,"l":2},{"t":"4ittz","tid":4,"ts":11,"l":2},{"t":"4wqni","tid":4,"ts":11,"l":2},{"t":"4u2f5","tid":4,"ts":847,"l":2},{"t":"4wqm9","tid":4,"ts":847,"l":2},{"t":"4o9ak","tid":4,"ts":848,"l":2},{"t":"4o9ai","tid":4,"ts":849,"l":2},{"t":"8dqkn","tid":4,"ts":40979,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":40979,"l":2,"a":9,"ie":1},{"t":"646u1","tid":4,"ts":40979,"l":2}
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [RuntimeBroker] Could not sign in interactively. Status: InteractionRequired
Error: 0xcaa20003
Context: (pii)
Tag: 0x2141c689
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [RuntimeBroker] Processing WAM exception
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [RuntimeBroker] failed_to_acquire_token_silently_from_broker WAM Error
Error Code: 3399614467
Error Message: (pii)
Internal Error Code: 557958793
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Exception type: Microsoft.Identity.Client.MsalUiRequiredException
, ErrorCode: failed_to_acquire_token_silently_from_broker
HTTP StatusCode 0
CorrelationId 6b5e2275-f39c-48d5-9715-b5f29709d97b
To see full exception details, enable PII Logging. See https://aka.ms/msal-net-logging
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.WamAdapters.HandleResponse(AuthResult authResult, AuthenticationRequestParameters authenticationRequestParameters, ILoggerAdapter logger, String errorMessage)
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.SignInInteractivelyAsync(AuthenticationRequestParameters authenticationRequestParameters)
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.AcquireTokenInteractiveAsync(AuthenticationRequestParameters authenticationRequestParameters, AcquireTokenInteractiveParameters acquireTokenInteractiveParameters)
at Microsoft.Identity.Client.Internal.Broker.BrokerInteractiveRequestComponent.FetchTokensAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.FetchTokensFromBrokerAsync(String brokerInstallUrl, CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.GetTokenResponseAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.ExecuteAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<b__1>d.MoveNext()
--- End of stack trace from previous location ---
at Microsoft.Identity.Client.Utils.StopwatchService.MeasureCodeBlockAsync(Func`1 codeBlock)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.RunAsync(CancellationToken cancellationToken)
DEBUG: InteractiveBrowserCredential.Authenticate was unable to retrieve an access token. Scopes: [ Directory.Read.All ] ParentRequestId: Exception: Azure.Identity.AuthenticationFailedException (0x80131500): InteractiveBrowserCredential authentication failed:
---> Microsoft.Identity.Client.MsalUiRequiredException (0x80131500): WAM Error
Error Code: 3399614467
Error Message: (pii)
Internal Error Code: 557958793
Connect-MgGraph: InteractiveBrowserCredential authentication failed:
PS C:\Users\enduser>
</details>
### Configuration
$PSVersionTable
Name Value
---- -----
PSVersion 7.6.1
PSEdition Core
GitCommitId 7.6.1
OS Microsoft Windows 10.0.26100
Platform Win32NT
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion 2.4
SerializationVersion 1.1.0.1
WSManStackVersion 3.0
Architecture - x64-based
### Other information
Reinstalling the Microsoft.Graph module did not resolve it.
Device restart did not resolve it.
Re-registered WAM-related packages
Describe the bug
Connect-MgGraph fails when authenticating to a customer tenant via GDAP from Windows devices. Authentication is routed through WAM / the Windows broker and cannot be forced to a browser. The same GDAP account works fine from macOS, and connecting to the home tenant from the same Windows device also works.
Reproducible across multiple Windows devices and multiple user accounts.
Expected behavior
Connect-MgGraph should successfully authenticate against a customer tenant via GDAP from a Windows device, the same way it does from macOS and the same way it does against the home tenant.
How to reproduce
SDK Version
2.37.0
Latest version known to work for scenario above?
2.25.0
Known Workarounds
Use device code auth (Connect-MgGraph -UseDeviceCode).
Use a native / non-GDAP account in the target tenant.
Downgrade Microsoft.Graph module to v2.25.0
Debug output
Click to expand log
``` PS C:\Users\enduser> $TENANT_ID = "XXXXXX-XXX-XXXX-XXX-XXXXXXX" PS C:\Users\enduser> Connect-MgGraph -Scopes "Directory.Read.All" -TenantId $TENANT_ID -debug WARNING: Note: Sign in by Web Account Manager (WAM) is enabled by default on Windows. If using an embedded terminal, the interactive browser window may be hidden behind other windows.Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): a
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ Directory.Read.All ] ParentRequestId:
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] MSAL MSAL.CoreCLR with assembly version '4.82.1.0'. CorrelationId(6b5e2275-f39c-48d5-9715-b5f29709d97b)
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b]
=== Request Data ===
Authority Provided? - True
Scopes - Directory.Read.All
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 6b5e2275-f39c-48d5-9715-b5f29709d97b
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:
FMI Path:
Credential FMI Path:
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] === Token Acquisition (InteractiveRequest) started:
Scopes: Directory.Read.All
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Fetching instance discovery from the network from host login.microsoftonline.com.
DEBUG: Request [39be002c-d711-4632-af1e-84e02d147569] GET https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-ms-client-request-id:39be002c-d711-4632-af1e-84e02d147569
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity.Broker/1.4.0 (.NET 10.0.6; Microsoft Windows 10.0.26100)
client assembly: Azure.Identity.Broker
DEBUG: Response [39be002c-d711-4632-af1e-84e02d147569] 200 OK (00.0s)
Cache-Control:max-age=86400, private
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
P3P:REDACTED
client-request-id:REDACTED
x-ms-request-id:69a23841-fa99-48a4-b2fe-010934840f00
x-ms-ests-server:REDACTED
x-ms-srs:REDACTED
Content-Security-Policy-Report-Only:REDACTED
X-XSS-Protection:REDACTED
Set-Cookie:REDACTED
Date:Thu, 14 May 2026 05:25:37 GMT
Content-Type:application/json; charset=utf-8
Content-Length:980
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Broker is configured. Starting broker flow without knowing the broker installation app link.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [Runtime] Broker supported OS.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [RuntimeBroker] Calling SignInInteractivelyAsync this will show the account picker.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0001] INFO SetAuthorityUri:78 Initializing authority from URI 'https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX/' without authority type, defaulting to MsSts
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO SetCorrelationId:259 Set correlation ID: 6b5e2275-f39c-48d5-9715-b5f29709d97b
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1191 The original authority is 'https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ExecuteInteractiveRequest:1202 The normalized realm is ''
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:200 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:200 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] INFO ModifyAndValidateAuthParameters:223 Authority Realm: XXXXXX-XXX-XXXX-XXX-XXXXXXX
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0002] WARNING TryEnqueueMsaDeviceCredentialAcquisitionAndContinue:1084 MsaDeviceOperationProvider is not available. Not attempting to register the device.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0003] WARNING ReturnResponseDueToMissingParameter:742 Missing Required parameters, but found no account to return.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0003] WARNING ReadAccountById:273 Account id is empty - account not found
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:37Z] [MSAL:0003] INFO GetCurrentWindowHandleForUIFlow:495 Specified brokerWindowHandle is valid.
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:38Z] [MSAL:0004] INFO CreateRequestForProviderWithProperties:862 Client-xtra-sku: MSAL.CoreCLR|4.82.1.0,|0.19.4,|,|,|1.1.0+local
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:25:38Z] [MSAL:0004] INFO AddClientSystemInfoToRequest:1248 Client-xtra-sku: MSAL.CoreCLR|4.82.1.0,|0.19.4,|,|,|1.1.0+local
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] ERROR ErrorInternalImpl:134 Created an error: 7q20j, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 3399614467, Context '(pii)'
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:456 Printing Telemetry for Correlation ID: 6b5e2275-f39c-48d5-9715-b5f29709d97b
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: start_time, Value: 2026-05-14T05:25:37.000Z
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_name, Value: SignInInteractively
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_status_code, Value: StatusInternal::InteractionRequired
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: client_id, Value: 14d82eec-204b-4c2f-b7e8-296a70dab67e
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: correlation_id, Value: 6b5e2275-f39c-48d5-9715-b5f29709d97b
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: broker_app_used, Value: true
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: stop_time, Value: 2026-05-14T05:26:18.000Z
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: all_error_tags, Value: 7q20j
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: msalruntime_version, Value: 0.19.4
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: original_authority, Value: https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: additional_query_parameters_count, Value: 2
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: read_token_last_error, Value: missing required parameter
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: auth_flow, Value: Broker
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: ui_event_count, Value: 1
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: wam_telemetry, Value: {"ui_visible":true,"scope":"Directory.Read.All offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/14d82eec-204b-4c2f-b7e8-296a70dab67e","provider_id":"https://login.windows.net","prompt_behavior":"select_account","oauth_error_code":"invalid_grant","is_guest_user_logon_token_request":false,"is_guest_user_logon_session":false,"is_guest_resource_scenario":false,"http_status":400,"http_event_count":12,"http_content_type":"application/aad.wam.ui","http_content_size":-1,"device_join":"aadj","correlation_id":"{6b5e2275-f39c-48d5-9715-b5f29709d97b}","client_id":"14d82eec-204b-4c2f-b7e8-296a70dab67e","cache_event_count":0,"broker_version":"10.0.26100.8115","authority":"https://login.microsoftonline.com/XXXXXX-XXX-XXXX-XXX-XXXXXXX","api_error_code":-895352829,"account_join_on_start":"primary","account_join_on_end":"secondary","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":3,"is_cached":0}
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: authorization_type, Value: Interactive
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_error_code, Value: 3399614467
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_error_tag, Value: 7q20j
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: api_error_context, Value: (pii)
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: is_successful, Value: false
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:464 Key: request_duration, Value: 40981
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:469 Printing Execution Flow:
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [MSAL:0004] INFO LogTelemetryData:477 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":0,"l":2},{"t":"4sufd","tid":2,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":2,"ts":0,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2,"s":1,"l":2},{"t":"8dqkl","tid":3,"ts":2,"l":2,"a":9,"ie":0},{"t":"4ly8o","tid":3,"ts":2,"l":2},{"t":"4scq4","tid":4,"ts":2,"l":2},{"t":"4wqnh","tid":4,"ts":2,"l":2},{"t":"4ittz","tid":4,"ts":11,"l":2},{"t":"4wqni","tid":4,"ts":11,"l":2},{"t":"4u2f5","tid":4,"ts":847,"l":2},{"t":"4wqm9","tid":4,"ts":847,"l":2},{"t":"4o9ak","tid":4,"ts":848,"l":2},{"t":"4o9ai","tid":4,"ts":849,"l":2},{"t":"8dqkn","tid":4,"ts":40979,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":40979,"l":2,"a":9,"ie":1},{"t":"646u1","tid":4,"ts":40979,"l":2}
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [RuntimeBroker] Could not sign in interactively. Status: InteractionRequired
Error: 0xcaa20003
Context: (pii)
Tag: 0x2141c689
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [RuntimeBroker] Processing WAM exception
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z] [RuntimeBroker] failed_to_acquire_token_silently_from_broker WAM Error
Error Code: 3399614467
Error Message: (pii)
Internal Error Code: 557958793
DEBUG: False MSAL 4.82.1.0 MSAL.CoreCLR .NET 10.0.6 Microsoft Windows 10.0.26100 [2026-05-14 05:26:18Z - 6b5e2275-f39c-48d5-9715-b5f29709d97b] Exception type: Microsoft.Identity.Client.MsalUiRequiredException
, ErrorCode: failed_to_acquire_token_silently_from_broker
HTTP StatusCode 0
CorrelationId 6b5e2275-f39c-48d5-9715-b5f29709d97b
To see full exception details, enable PII Logging. See https://aka.ms/msal-net-logging
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.WamAdapters.HandleResponse(AuthResult authResult, AuthenticationRequestParameters authenticationRequestParameters, ILoggerAdapter logger, String errorMessage)
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.SignInInteractivelyAsync(AuthenticationRequestParameters authenticationRequestParameters)
at Microsoft.Identity.Client.Platforms.Features.RuntimeBroker.RuntimeBroker.AcquireTokenInteractiveAsync(AuthenticationRequestParameters authenticationRequestParameters, AcquireTokenInteractiveParameters acquireTokenInteractiveParameters)
at Microsoft.Identity.Client.Internal.Broker.BrokerInteractiveRequestComponent.FetchTokensAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.FetchTokensFromBrokerAsync(String brokerInstallUrl, CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.GetTokenResponseAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.ExecuteAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.<>c__DisplayClass11_1.<b__1>d.MoveNext()
--- End of stack trace from previous location ---
at Microsoft.Identity.Client.Utils.StopwatchService.MeasureCodeBlockAsync(Func`1 codeBlock)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.RunAsync(CancellationToken cancellationToken)
DEBUG: InteractiveBrowserCredential.Authenticate was unable to retrieve an access token. Scopes: [ Directory.Read.All ] ParentRequestId: Exception: Azure.Identity.AuthenticationFailedException (0x80131500): InteractiveBrowserCredential authentication failed:
---> Microsoft.Identity.Client.MsalUiRequiredException (0x80131500): WAM Error
Error Code: 3399614467
Error Message: (pii)
Internal Error Code: 557958793
Connect-MgGraph: InteractiveBrowserCredential authentication failed:
PS C:\Users\enduser>