Persistent authorisation failure even with all correct credentials

[MessiasLima]

Ive checked all the credentials, followed step by set the configuration guide, still´, every time I want to run a command I get an authentication failure

07:24:46 fail: MSStore.CLI.Commands.Apps.ListCommand.Handler[0] Error while retrieving Managed Applications. MSStore.API.MSStoreException: Failed to get the applications - {"code":"Unauthorized","message":"Identity cannot be 
authorized. CorrelationId: e9a8ae08-5a8f-4a06-9343-607fd33ecf4b"}  ---> MSStore.API.MSStoreException: {"code":"Unauthorized","message":"Identity cannot be authorized. CorrelationId: e9a8ae08-5a8f-4a06-9343-607fd33ecf4b"}    at 
MSStore.API.SubmissionClient.InvokeAsync[T](HttpMethod httpMethod, String relativeUrl, Object requestContent, JsonTypeInfo`1 jsonTypeInfo, CancellationToken ct) in /_/MSStore.API/SubmissionClient.cs:line 287    at 
MSStore.API.Packaged.StorePackagedAPI.GetDevCenterApplicationsAsync(Int32 skip, Int32 top, CancellationToken ct) in /_/MSStore.API/Packaged/StorePackagedAPI.cs:line 210    at 
MSStore.API.Packaged.StorePackagedAPI.GetApplicationsAsync(CancellationToken ct) in /_/MSStore.API/Packaged/StorePackagedAPI.cs:line 188    --- End of inner exception stack trace ---    at 
MSStore.API.Packaged.StorePackagedAPI.GetApplicationsAsync(CancellationToken ct) in /_/MSStore.API/Packaged/StorePackagedAPI.cs:line 193    at 
MSStore.CLI.Commands.Apps.ListCommand.Handler.<>c__DisplayClass5_0.<<InvokeAsync>b__0>d.MoveNext() in /_/MSStore.CLI/Commands/Apps/ListCommand.cs:line 40

Is there anything I could do, besides checking all credentials for the 7th time?

[qboisson]

Got the same error again and again ...

Trying to debug with :

curl -X POST "https://login.microsoftonline.com/<tenant-id>/oauth2/token" \
  -d "grant_type=client_credentials" \
  -d "client_id=<client-id>" \
  -d "client_secret=<client-secret>" \
  -d "resource=https://manage.devcenter.microsoft.com"

and

curl -s -w "\nHTTP_CODE: %{http_code}\n" \
  -H "Authorization: Bearer $TOKEN" \
  "https://manage.devcenter.microsoft.com/v1.0/my/applications"

with the acces token retrieved previously but same error

I'm investigating on the API permissions between the Microsoft Entra applications and the connection with Partner Center applications but can't find any solution yet.

[AppSolves]

Same issue for me, have you found any solutions yet?

[AppSolves]

I was able to fix this by recreating the Entra application through Microsoft Partner Center (not via the Entra Admin Dashboard).

Steps to fix:

1. Go to User management in Partner Center and unlink or delete the previously used Entra application.
2. On the same page, click Add Microsoft Entra Application and create a new one there.
   You can set the reply_url to http://localhost.

Apparently, it is not sufficient to create an Entra app directly in Entra.
The application must be created through Partner Center so it is properly linked and authorized.

[qboisson]

Hi Kaan Gönüldinc (@AppSolves) , I am not sure to correctly understand the "steps to fix" section.

Here are the steps I followed :

• the ones described in the video here
• then I created the application on User management in Partner Center (linked to the Entra application previously created) and I gave the role Manager (Windows)

I tried multiple times to unlink / delete / recreate new applications but still got the issue.
I also noticed there was an "Administration consent" page in Partner Center : https://partner.microsoft.com/en-us/dashboard/products//administrator-consent where I put the correct client id and it it not enough to get the application authorized