Cannot log into Azure Subscription: ValueError: OIDC Discovery endpoint rejects our request

[hoyabaptiste92]

This is autogenerated. Please review and update as needed.

Describe the bug

Command Name
az login

Errors:

The command failed with an unexpected error. Here is the traceback:
Unable to get authority configuration for https://login.microsoftonline.com/d5884a56-f725-4e55-bb68-9f4525198f88. Authority would typically be in a format of https://login.microsoftonline.com/your_tenant_name
Traceback (most recent call last):
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\msal/authority.py", line 83, in __init__
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\msal/authority.py", line 151, in tenant_discovery
ValueError: OIDC Discovery endpoint rejects our request

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 231, in invoke
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 658, in execute
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 721, in _run_jobs_serially
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 692, in _run_job
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 328, in __call__
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 121, in handler
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/profile/custom.py", line 139, in login
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 177, in login
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 746, in find_using_common_tenant
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 233, in get_user_credential
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/msal_authentication.py", line 39, in __init__
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\msal/application.py", line 1466, in __init__
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\msal/application.py", line 438, in __init__
  File "D:\a\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\msal/authority.py", line 87, in __init__
ValueError: Unable to get authority configuration for https://login.microsoftonline.com/d5884a56-f725-4e55-bb68-9f4525198f88. Authority would typically be in a format of https://login.microsoftonline.com/your_tenant_name

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

• Put any pre-requisite steps here...
• az login

Expected Behavior

Environment Summary

Windows-10-10.0.22000-SP0
Python 3.8.9
Installer: MSI

azure-cli 2.34.1

Extensions:
account 0.2.2

Dependencies:
msal 1.16.0
azure-mgmt-resource 20.0.0

Additional Context

[yonzhan]

Jiashuo Li (@jiasli) for awareness

[jiasli]

Duplicate of #20507

Your tenant ID d5884a56-f725-4e55-bb68-9f4525198f88 is incorrect:

GET https://login.microsoftonline.com/d5884a56-f725-4e55-bb68-9f4525198f88/v2.0/.well-known/openid-configuration
{"error":"invalid_tenant","error_description":"AADSTS90002: Tenant 'd5884a56-f725-4e55-bb68-9f4525198f88' not found. Check to make sure you have the correct tenant ID and are signing into the correct cloud. Check with your subscription administrator, this may happen if there are no active subscriptions for the tenant.\r\nTrace ID: 9d9cdf4e-c3cf-4a44-87f3-756015a54500\r\nCorrelation ID: ce1b3092-c487-40bb-8820-ea01fdc19481\r\nTimestamp: 2022-03-21 01:54:54Z","error_codes":[90002],"timestamp":"2022-03-21 01:54:54Z","trace_id":"9d9cdf4e-c3cf-4a44-87f3-756015a54500","correlation_id":"ce1b3092-c487-40bb-8820-ea01fdc19481","error_uri":"https://login.microsoftonline.com/error?code=90002"}

We will refine the error message in next release of Azure CLI which takes AzureAD/microsoft-authentication-library-for-python#443.

[hoyabaptiste92]

I have a subscription that is linked to that directory (d5884a56-f725-4e55-bb68-9f4525198f88). I cannot do anything with that subscription because I cannot access that directory.

[jiasli]

d5884a56-f725-4e55-bb68-9f4525198f88 is not correct as AAD doesn't have information about this tenant: https://login.microsoftonline.com/d5884a56-f725-4e55-bb68-9f4525198f88/v2.0/.well-known/openid-configuration

Please double check if the GUID is right. BTW, can you access this subscription in Azure Portal?