Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Error authenticating Crowd with Azure Active Directory

Colin Goudie
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 27, 2019

We've been trying to setup Crowd 3.6 against Azure Active Directory with the newer App Registration Settings (as legacy is now gone)

We create the 2 required apps in Azure and the Test Connectivity works but users cannot authenticate.


It appears the auth requests are not attaching client_secret or client_assertion from the error below.

Any idea what settings we may have missed or has anyone run into a similar issue ?


Thanks

 

Caused by: java.util.concurrent.ExecutionException: com.microsoft.aad.adal4j.AuthenticationException: {"error_description":"AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.\r\nTrace ID: d8b9e01e-3eab-4901-81d3-2a95872b1900\r\nCorrelation ID: b4ecd08c-c934-4fe0-a2b4-f8956413a103\r\nTimestamp: 2019-10-28 00:00:31Z","error":"invalid_client","error_uri":"https:\/\/login.windows.net\/error?code=7000218"}
at java.util.concurrent.FutureTask.report(FutureTask.java:122)
at java.util.concurrent.FutureTask.get(FutureTask.java:192)
at com.atlassian.crowd.directory.authentication.impl.SameThreadUserCredentialVerifier.checkUserCredential(SameThreadUserCredentialVerifier.java:38)
... 292 more
Caused by: com.microsoft.aad.adal4j.AuthenticationException: {"error_description":"AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.\r\nTrace ID: d8b9e01e-3eab-4901-81d3-2a95872b1900\r\nCorrelation ID: b4ecd08c-c934-4fe0-a2b4-f8956413a103\r\nTimestamp: 2019-10-28 00:00:31Z","error":"invalid_client","error_uri":"https:\/\/login.windows.net\/error?code=7000218"}
at com.microsoft.aad.adal4j.AdalTokenRequest.executeOAuthRequestAndProcessResponse(AdalTokenRequest.java:107)
at com.microsoft.aad.adal4j.AuthenticationContext.acquireTokenCommon(AuthenticationContext.java:816)
at com.microsoft.aad.adal4j.AuthenticationContext.access$100(AuthenticationContext.java:64)
at com.microsoft.aad.adal4j.AuthenticationContext$1.call(AuthenticationContext.java:172)
at com.microsoft.aad.adal4j.AuthenticationContext$1.call(AuthenticationContext.java:161)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at com.google.common.util.concurrent.MoreExecutors$DirectExecutorService.execute(MoreExecutors.java:299)
at java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:134)
at com.google.common.util.concurrent.AbstractListeningExecutorService.submit(AbstractListeningExecutorService.java:58)
at com.google.common.util.concurrent.AbstractListeningExecutorService.submit(AbstractListeningExecutorService.java:37)
at com.microsoft.aad.adal4j.AuthenticationContext.acquireToken(AuthenticationContext.java:161)
at com.microsoft.aad.adal4j.AuthenticationContext.acquireToken(AuthenticationContext.java:248)
at com.atlassian.crowd.directory.authentication.impl.SameThreadUserCredentialVerifier.checkUserCredential(SameThreadUserCredentialVerifier.java:37)
... 292 more

1 answer

0 votes
Colin Goudie
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 27, 2019

For people looking at this appears our user accounts had MFA required which is causing the issue. Does Crowd 3.6 support having Azure MFA required?

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events