Azure AD logins fail with "failed to obtain access token" error log

Knowledge Solutions
, , , , ,
1

Problem statement

All logins for an Azure AD connection are failing for the customer. The tenant log for failed login shows an Azure error message:

{
  "type": "f",
  "description": "failed to obtain access token",
  "connection_id": "",
  "details": {
    "error": {
      "message": "failed to obtain access token",
      "oauthError": "invalid_request",
      "type": "request-error",
      "payload": "{\"error\":\"invalid_request\",\"error_description\":\"AADSTS900432: Confidential Client is not supported in Cross Cloud request."}"
    },
}

Solution

The failure could be due to the client secret in Azure having expired. Therefore, please verify that. This doc explains how to generate a new client secret in Azure.

1 Like