Principal not found in tenant error

[AlbyST]

Principal not found in tenant error

[yonzhan]

Thank you for opening this issue, we will look into it.

[jiasli]

The error AADSTS500011 is returned by Microsoft Entra ID's token service and surfaced through Azure CLI.

Please check if https://xxx.azure-devices-provisioning.net/ is correctly configured in the tenant yyy and allows Azure CLI's first party app ID 04b07795-8ddb-461a-bbee-02f9e1bf7b46. Also, you may try adding --tenant and specifying the correct tenant ID.

If you still have any questions, please reach out to the customer support of the corresponding Resource Provider. Thanks for your understanding.

[AlbyST]

@jiasli thank you for the quick response. Is it possible that the same error is reported as

2024-06-06T08:49:12Z   [Error]   DefaultAzureCredential failed to retrieve a token from the included credentials.
Attempted credentials:
	EnvironmentCredential: EnvironmentCredential authentication unavailable. Environment variables are not fully configured.
Visit https://aka.ms/azsdk/python/identity/environmentcredential/troubleshoot to troubleshoot this issue.
	ManagedIdentityCredential: (None) An unexpected error occured while fetching the AAD Token.
Code: None
Message: An unexpected error occured while fetching the AAD Token.
To mitigate this issue, please refer to the troubleshooting guidelines here at https://aka.ms/azsdk/python/identity/defaultazurecredential/troubleshoot.
2024-06-06T08:49:12Z   [Error]   Executed 'Functions.xxxx' (Failed, Id=525df530-2da1-40ea-a637-0087ee24c499, Duration=11268ms)

when requesting the AAD token directly to the Microsoft Entra ID's token service? Unfortunately this last error message doesn't have much information for debugging.

[jiasli]

DefaultAzureCredential is from Azure Identity SDK.

Judging from the above error message, it seems AzureCliCredential is not attempted. AzureCliCredential internally calls az account get-access-token, but in the issue description, even the initial az login fails, so I don't think it is related to Azure CLI.

For Azure Identity SDK questions, it is better to open an issue at https://github.com/Azure/azure-sdk-for-python/issues