oauth2: "invalid_client" "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.

[ykezlya]

Hello, I'm trying to configure Entra ID authentication on Ubuntu following the instructions and got the error:
oauth2: "invalid_client" "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.

My application is Private and I use client_secret in the configuration (/var/snap/authd-msentraid/current/broker.conf) but it seems the authd-msentraid doesn't see this variable...

Could you help me with the issue?

Distributor ID: Ubuntu
Description:    Ubuntu 24.04.2 LTS
Release:        24.04
Codename:       noble
6.8.0-55-generic #57-Ubuntu SMP PREEMPT_DYNAMIC Wed Feb 12 23:42:21 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
authd-msentraid    0.2.0+33feab0.0d0d6c7  137    0.x/stable
Package: authd Version: 0.4.1

$ sudo snap logs authd-msentraid
2025-03-07T11:39:23Z systemd[1]: Stopping snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid...
2025-03-07T11:39:23Z systemd[1]: snap.authd-msentraid.authd-msentraid.service: Deactivated successfully.
2025-03-07T11:39:23Z systemd[1]: Stopped snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid.
2025-03-07T11:39:23Z systemd[1]: Started snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid.
2025-03-07T11:40:22Z -[2664]: oauth2: "invalid_client" "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'. Trace ID: feb76cab-240b-4a8b-a0dd-7e8e80d80f00 Correlation ID: 3f7daddf-45a5-48e7-ad38-424f3a4b4851 Timestamp: 2025-03-07 11:40:22Z" "https://login.microsoftonline.com/error?code=7000218"
2025-03-07T11:40:44Z systemd[1]: Stopping snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid...
2025-03-07T11:40:44Z systemd[1]: snap.authd-msentraid.authd-msentraid.service: Deactivated successfully.
2025-03-07T11:40:44Z systemd[1]: Stopped snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid.
2025-03-07T11:40:44Z systemd[1]: Started snap.authd-msentraid.authd-msentraid.service - Service for snap application authd-msentraid.authd-msentraid.
2025-03-07T11:41:22Z -[3037]: oauth2: "invalid_client" "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'. Trace ID: 6bef05e6-4c7c-4707-b5ff-dbd5a1230d00 Correlation ID: 96a1ec44-5531-430c-ae57-d905fb99a359 Timestamp: 2025-03-07 11:41:22Z" "https://login.microsoftonline.com/error?code=7000218"

[adombeck]

Sorry, we missed this question. Is it still relevant?

[adombeck]

(in general, if you're encountering issues with authd, it's better to directly open a GitHub issue)