Forum Discussion

Copper Contributor

Jun 01, 2021

400 Bad Request UndefinedScope ProfileBadRequestException on /oidc/userinfo for some users

Hi, our working setup stopped working sometime at the end of may (not sure of the exact date). We request a token from the authorization endpoint https://login.microsoftonline.com/<TENANT-ID>/oauth2...

Azure Active Directory (AAD)

jonenst

Copper Contributor

Jun 07, 2021

Hi, thanks for the reply. Nice to know I'm not the only one.

I just tested https://graph.microsoft.com/v1.0/me and indeed it returns my name and some other things.

However I can't use it because my code is not specific to azure's oidc provider. My code only gets the user_info endpoint from the https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration document and uses that.

Do you know if I can report this to the team running "https://graph.microsoft.com/oidc/userinfo" ?

Thanks a lot

Demetree

Copper Contributor

Jun 07, 2021

jonenst it sounds like this will need to be addressed on the Microsoft side if you're constrained by the values from the config document.

Unfortunately, I'm not aware of what the process to formally report it is.

Cheers,

Demetree

jonenst
Copper Contributor
Sep 15, 2021
Testing again, it works now. apparently it was fixed this summer in their server.