authentication for bot framework
Description: Hello Microsoft Support,
I’m a developer testing a bot and I need admin consent applied in the Microsoft Bot Framework tenant (botframework.com) for my application so the Bot Service (Web Chat / Test in Web Chat) can issue tokens that validate against my app.
App details:
- App (client) ID: c8879f9b-a9c7-4f2e-a1a9-b8d0e9250431
- App display name: princeschannelbot
- Redirect URI used for admin-consent attempt: https://jwt.ms
- Admin consent attempt URL: https://login.microsoftonline.com/botframework.com/adminconsent?client_id=c8879f9b-a9c7-4f2e-a1a9-b8d0e9250431&redirect_uri=https%3A%2F%2Fjwt.ms
Issue: When attempting to use Test in Web Chat the Bot Service issues tokens from the Bot Framework tenant. My bot receives AADSTS700016 / AADSTS90072 errors because a service principal for my app is not present in the botframework.com tenant and my user account is not an admin in that tenant and thus cannot perform admin consent.
Request: Please create a service principal for the above application in the Bot Framework tenant (botframework.com) and grant tenant-wide admin consent so tokens issued by the Bot Service validate correctly against the app. After consent, please confirm or reply with the enterprise application name or confirmation.
Verification steps I will perform after your confirmation:
- Restart the bot locally with the same MicrosoftAppId and client secret.
- Test via Test in Web Chat and confirm there are no AADSTS700016 or AADSTS90072 errors.
I have attached the jwt.ms redirect URL that shows the access_denied AADSTS90072 error and relevant logs. Please let me know if you need additional information.
Thank you, [Your name and contact info]Description: Hello Microsoft Support,
I’m a developer testing a bot and I need admin consent applied in the Microsoft Bot Framework tenant (botframework.com) for my application so the Bot Service (Web Chat / Test in Web Chat) can issue tokens that validate against my app.
App details:
- App (client) ID: c8879f9b-a9c7-4f2e-a1a9-b8d0e9250431
- App display name: princeschannelbot
- Redirect URI used for admin-consent attempt: https://jwt.ms
- Admin consent attempt URL: https://login.microsoftonline.com/botframework.com/adminconsent?client_id=c8879f9b-a9c7-4f2e-a1a9-b8d0e9250431&redirect_uri=https%3A%2F%2Fjwt.ms
Issue: When attempting to use Test in Web Chat the Bot Service issues tokens from the Bot Framework tenant. My bot receives AADSTS700016 / AADSTS90072 errors because a service principal for my app is not present in the botframework.com tenant and my user account is not an admin in that tenant and thus cannot perform admin consent.
Request: Please create a service principal for the above application in the Bot Framework tenant (botframework.com) and grant tenant-wide admin consent so tokens issued by the Bot Service validate correctly against the app. After consent, please confirm or reply with the enterprise application name or confirmation.
Verification steps I will perform after your confirmation:
- Restart the bot locally with the same MicrosoftAppId and client secret.
- Test via Test in Web Chat and confirm there are no AADSTS700016 or AADSTS90072 errors.
I have attached the jwt.ms redirect URL that shows the access_denied AADSTS90072 error and relevant logs. Please let me know if you need additional information.
Thank you, ******@robo-camp.org