Update 8/18/2025: Based on feedback we received and to give customers more time to prepare, we are cancelling the first planned temporary enforcement (August) and will resume the temporary enforcemen...
Updated Aug 20, 2025
Version 11.0
Blog Post
10 MIN READ
Dedicated Hybrid App: temporary enforcements, new HCW and possible hybrid functionality disruptions
Updated properties of Exchange EvoSTS Auth server property ApplicationIdentifier with Application ID of ExchnageServerApp-*****
Get-AuthServer evosts | Set-AuthServer -ApplicationIdentifier *************
After this update the issue was resolved and rich coexistence was restored - Test-OAuthConnectivity test is successful and Sign-in logs have appeared in for ExchangeServerApp-***** in Entra Id (Service Principal sign-ins)
LukasSMSFT
Microsoft
MicrosoftThat’s definitely unexpected. The Hybrid Configuration Wizard (HCW) is designed to handle all necessary steps automatically - including configuring the ApplicationIdentifier on the EvoSTS Auth Server object.
Without reviewing the HCW debug log, it’s difficult to determine why this configuration step may have been skipped. If you’d like us to investigate further, the best approach would be to open a support case and share the HCW debug log with us.
LukasSMSFT Thank you for advice. Reviewed the HCW logs. According to the logs, HCW unable to create new Auth Server because of duplicate properties
At the moment there are two Auth Servers evoSTS and Microsoft ACS
Initially these servers were created manually (without HCW) to enable Manual OAuth Configuration for Microsoft Teams. HCW was completed later.
Extract from the logs is below
[Client=UX, Session=OnPremises, Cmdlet=New-AuthServer, Thread=20] START New-AuthServer -Name 'EvoSts - 8c1f2xxx-xxxx-xxxx-82b0-7e1xxx36xxxd' -AuthMetadataUrl 'https://login.windows.net/xxxxx.onmicrosoft.com/federationmetadata/2007-06/federationmetadata.xml' -DomainName 'xxx.xx','xxxxx.mail.onmicrosoft.com' -Type AzureAD
[Client=UX, Provider=OnPremises, Thread=20] PowerShell Error Record: {CategoryInfo={Activity=[System.String] New-AuthServer,Category=[System.Management.Automation.ErrorCategory] InvalidArgument,Reason=[System.String] TaskException,TargetName=[System.String] ,TargetType=[System.String] },ErrorDetails=,Exception=[System.Management.Automation.RemoteException] Found existing Auth Server "evoSTS" with duplicate properties.,FullyQualifiedErrorId=[System.String] [Server=XXXXXXXX,RequestId=bc8d6f85-0cb4-4e8e-ad76-28cd0c0b5100,TimeStamp=8/14/2025 2:00:41 PM] [FailureCategory=Cmdlet-TaskException] 96E41C49,Microsoft.Exchange.Management.SystemConfigurationTasks.NewAuthServer}
[Client=UX, Session=OnPremises, Cmdlet=New-AuthServer, Thread=20] FINISH Time=1775.2ms Results=PowerShell failed to invoke 'New-AuthServer': Found existing Auth Server "evoSTS" with duplicate properties. {CategoryInfo={Activity=[System.String] New-AuthServer,Category=[System.Management.Automation.ErrorCategory] InvalidArgument,Reason=[System.String] TaskException,TargetName=[System.String] ,TargetType=[System.String] },ErrorDetails=,Exception=[System.Management.Automation.RemoteException] Found existing Auth Server "evoSTS" with duplicate properties