Home

Microsoft Teams sign in flow

%3CLINGO-SUB%20id%3D%22lingo-sub-420386%22%20slang%3D%22en-US%22%3EMicrosoft%20Teams%20sign%20in%20flow%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-420386%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Community%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMost%20of%20us%20always%20wondered%20how%20Microsoft%20Teams%20sign-in%20works%3F%3C%2FP%3E%0A%3CP%3EAlso%20to%20mention%2C%20Teams%20client%20sign%20in%20issue%20is%20one%20of%20the%20most%20common%20scenario%20for%20Helpdesk%20or%20Admins%20or%20Support%20Folks%20who%20are%20working%20in%20TEAMS%20troubleshooting%20filed.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20tried%20to%20find%20detailed%20article%20which%20talks%20about%20TEAMS%20Sign-in%20and%20found%20this%20which%20is%20no%20longer%20available.%20Hence%20posting%20it%20here%20as%20I%20had%20it%20archived%20in%20my%20OneNote%20(Credits%20goes%20to%20original%20owner%20Anurag%20Agarwal)%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fanuagar%2F2017%2F10%2F15%2Fmicrosoft-teams-teams-client-sign-in%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.msdn.microsoft.com%2Fanuagar%2F2017%2F10%2F15%2Fmicrosoft-teams-teams-client-sign-in%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBefore%20entering%20the%20troubleshooting%20phase%2C%20one%20should%20first%20understand%20the%20TEAMS%20Sign%20in%20process%20flow%20to%20identity%20what's%20expected%20and%20act%20accordingly.%20In%20this%20article%2C%20we%20will%20focus%20mainly%20on%20TEAMS%20Client%20login.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106433iE5CDF41CD604D11B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Flow1.jpg%22%20title%3D%22Flow1.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EHow%20does%20Sign%20IN%20work%3F%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%3EThe%20client%20reaches%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fteams.skype.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eskype.com%3C%2FA%3Eand%20start%20the%20bootstrap.%20Under%20JSON%20we%20should%20be%20able%20to%20view%20all%20features%20are%20enabled%20or%20not%20enabled%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20595px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106420iF26EAF945EB5A2C8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%221.jpg%22%20title%3D%221.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%20style%3D%22box-sizing%3A%20border-box%3B%20clear%3A%20left%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20list-style-image%3A%20none%3B%20list-style-position%3A%20outside%3B%20list-style-type%3A%20disc%3B%20margin-bottom%3A%2012px%3B%20margin-top%3A%200px%3B%20orphans%3A%202%3B%20padding-left%3A%202.5em%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3E%0A%3CLI%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%22%3EThe%20page%26nbsp%3B%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23146cac%3B%20text-decoration%3A%20underline%3B%22%20href%3D%22http%3A%2F%2Fteams.microsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Emicrosoft.com%3C%2FA%3Ewill%20present%20a%20sign%20in%20page%20with%20a%20frame%20from%26nbsp%3B%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23146cac%3B%20text-decoration%3A%20underline%3B%22%20href%3D%22http%3A%2F%2Flogin.microsoftonline.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Elogin.microsoftonline.com%3C%2FA%3E%26nbsp%3Band%20follow%20an%20OAUTH%20authentication.%3C%2FLI%3E%0A%3CLI%20style%3D%22box-sizing%3A%20border-box%3B%20font-family%3A%20%26amp%3Bquot%3B%22%3E%3CU%20style%3D%22box-sizing%3A%20border-box%3B%22%3E%3CA%20style%3D%22background-color%3A%20transparent%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23146cac%3B%20text-decoration%3A%20underline%3B%22%20href%3D%22https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Fuserrealm%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Fuserrealm%2F%3C%2FA%3E%3C%2FU%3E-%20will%20return%20where%20the%20OAUTH%20auth%20will%20happen.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106422iD23579369606E6C1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%2222.jpg%22%20title%3D%2222.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EA%20token%20will%20be%20generated%20and%20the%20client%20and%20can%20be%20verified%20on%20the%20302%20message%20from%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Flogin.microsoftonline.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Emicrosoftonline.com%3C%2FA%3E%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106423iE21A6A0FEF2800EE%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%2223.jpg%22%20title%3D%2223.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EToken%20expires_in%3D3599%20(1h)%3C%2FLI%3E%0A%3CLI%3EFrom%20this%20point%20the%20client%20execute%20all%20the%20requests%20with%20the%20access%20token%20on%20the%20HTTP%20header%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20578px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106424iA1191A7116042C6E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222.jpg%22%20title%3D%222.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EHow%20does%20the%20client%20identify%20where%20to%20register%3F%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%3EThe%20client%20will%20always%20attempt%20to%20register%20to%26nbsp%3B%3CSTRONG%3E%3CA%20href%3D%22http%3A%2F%2Fteams.microsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Emicrosoft.com%3C%2FA%3E%3C%2FSTRONG%3Ethat%20is%20the%20URL%20of%20the%20service.%3C%2FLI%3E%0A%3CLI%3EOnce%20registered%2C%20the%20client%20will%20POST%20to%26nbsp%3B%3CSTRONG%3E%3CA%20href%3D%22http%3A%2F%2Fapi.teams.skype.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eteams.skype.com%3C%2FA%3E%3C%2FSTRONG%3Ethat%20will%20reply%20with%20a%20JSON%20with%20the%20services%20the%20client%20have%20to%20register%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106425iA0E21BAC265B8299%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%223.jpg%22%20title%3D%223.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EThe%20client%20do%20authenticated%20requests%20to%20the%26nbsp%3B%3CSTRONG%3Eams%2C%20chat%20service%2C%20middleTier%2C%20msImageService%26nbsp%3B%3C%2FSTRONG%3Eand%3CSTRONG%3E%26nbsp%3Bsearch%3C%2FSTRONG%3E%26nbsp%3Bservices%20on%20respective%20geographical%20region.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ELog%20Collection%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CTABLE%20width%3D%221080%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22506%22%3E%3CP%3E%3CSTRONG%3EWindows%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22574%22%3E%3CP%3E%3CSTRONG%3EMAC%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%22506%22%3E%3CP%3EWeb%20logs%3C%2FP%3E%0A%3CP%3E%C2%B7%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Press%20(CTRL%2BALT%2BSHFT%2B1)%20in%20client%20to%20download%20logs%20(Electron%20Logs)%3CBR%20%2F%3ENote%20-%20be%20sure%20to%20use%20the%201%20on%20top%20of%20keyboard%20and%20not%201%20from%20number%20pad%20as%20that%20maps%20to%20a%20different%20key%3C%2FP%3E%0A%3CP%3E%C2%B7%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%25downloads%25MSTeams%20Diagnostics%20Log%26nbsp%3B.txt%3C%2FP%3E%0A%3CP%3EBest%20logs%20to%20start%20with%3C%2FP%3E%0A%3CP%3EContains%20most%20all%20client%20activity%3C%2FP%3E%0A%3CP%3EDesktop%20logs%3C%2FP%3E%0A%3CP%3E%C2%B7%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%25appdata%25MicrosoftTeamslogs.txt%3C%2FP%3E%0A%3CP%3EContains%20framework%20and%20bootstrapping%20info%3C%2FP%3E%0A%3CP%3EApp%20Bootstrap%20process%3C%2FP%3E%0A%3CP%3EPlugin%20initialization%3C%2FP%3E%0A%3CP%3EUpdate%20Management%3C%2FP%3E%0A%3CP%3ESome%20SSO%20info%20when%20using%20SSO%20builds%20(Desktop%20Auth)%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22574%22%3E%3CP%3EWeb%20logs%3C%2FP%3E%0A%3CP%3E%C2%B7%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Press%20(Command%2BOption%2BSHFT%2B1)%20in%20client%20to%20download%20logs%20(Electron%20Logs)%3CBR%20%2F%3E%3CSTRONG%3ENote%3C%2FSTRONG%3E%26nbsp%3B-%20be%20sure%20to%20use%20the%201%20on%20top%20of%20keyboard%20and%26nbsp%3B%3CSTRONG%3Enot%3C%2FSTRONG%3E%26nbsp%3B1%20from%20number%20pad%20as%20that%20maps%20to%20a%20different%20key%3C%2FP%3E%0A%3CP%3E%C2%B7%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.blogarama.com%2Fsearch-posts%2F%3Fsearch%3Ddownloadsmsteams%2520diagnostics%2520log%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDownloadsmsteams%20Diagnostics%20Log%3C%2FA%3E%26nbsp%3B.txt%3C%2FP%3E%0A%3CP%3EBest%20logs%20to%20start%20with%3C%2FP%3E%0A%3CP%3EContains%20most%20all%20client%20activity%3C%2FP%3E%0A%3CP%3EDesktop%20logs%3C%2FP%3E%0A%3CP%3E%C2%B7%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20~%2FLibrary%2FApplication%26nbsp%3BSupport%2FMicrosoft%2FTeams%2Flogs.txt%3C%2FP%3E%0A%3CP%3EContains%20framework%20and%20bootstrapping%20info%3C%2FP%3E%0A%3CP%3EApp%20Bootstrap%20process%3C%2FP%3E%0A%3CP%3EPlugin%20initialization%3C%2FP%3E%0A%3CP%3EUpdate%20Management%3C%2FP%3E%0A%3CP%3ESome%20SSO%20info%20when%20using%20SSO%20builds%20(Desktop%20Auth)%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ETroubleshooting%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWhile%20troubleshooting%20TEAMS%20Sign-in%20we%20need%20to%20have%20answers%20to%20following%20questions.%20Once%2C%20you%20have%20answer%20to%20questions%20you%20have%20almost%20know%20the%20cause%20of%20it%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EWas%20user%20able%20to%20sign%20in%20before%3F%3CUL%3E%0A%3CLI%3EProvisioning%20Issue%3F%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3EHow%20widespread%20is%20the%20sign-in%20failure%3F%3CUL%3E%0A%3CLI%3E1%20user%2C%20few%20users%2C%20All%20users%20in%20the%20tenant%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3EWhat%20is%20the%20Repro%20rate%3F%3CUL%3E%0A%3CLI%3EIntermittent%3C%2FLI%3E%0A%3CLI%3EConsistent%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3EWhat%20clients%20are%20impacted%3F%3CUL%3E%0A%3CLI%3EWeb%3C%2FLI%3E%0A%3CLI%3EWindows%3C%2FLI%3E%0A%3CLI%3EMac%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3ENetworks%20where%20sign-in%20fails%3CUL%3E%0A%3CLI%3ECorp%3C%2FLI%3E%0A%3CLI%3EVPN%20to%20Corp%3C%2FLI%3E%0A%3CLI%3EPublic%20Internet%20(Shopping%20complex%2C%20airports%2C%20etc)%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EInitial%20steps%20when%20investigating%20a%20sign%20in%20problem%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%3EIssue%20is%20isolated%20to%20specific%20network%3CUL%3E%0A%3CLI%3ELikely%20cause%20is%20a%20Firewall%20blocking%20at%20a%20perimeter%20network%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3CLI%3EIssue%20is%20impacting%20all%20users%20everywhere%3CUL%3E%0A%3CLI%3ELikely%20cause%20is%20with%20entitlement%20or%20other%20issue%20authenticating%20to%20the%20service%3CUL%3E%0A%3CLI%3EPossible%20SSO%20or%202fA%20issue.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EGather%20app%20logs%20or%20web%20traffic%20tracing%20(Fiddler)%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%3EFrom%20bottom%20of%20the%20log%20search%20for%20key%20words%3C%2FLI%3E%0A%3CLI%3EExample%20or%20%22err_%22%20or%20%22error%22%20or%20%22failed%22%3C%2FLI%3E%0A%3CLI%3EFrom%20Fiddler%20trace%2C%20you%20can%20filter%20Example%20Process%3DTeams.exe%3CUL%3E%0A%3CLI%3ESearch%20for%20anything%20unusual%20like%20a%204xx%20or%205xx%20response%20that%20suggests%20something%20is%20missing%20or%20there%20is%20an%20error.%20(Recommend%20opening%20%22Raw%22%20view%20in%20Inspectors)%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20use%20Microsoft%20Teams%2C%20ensure%20both%20the%20FQDN%20and%20IP%20Address%20endpoints%20listed%20in%20the%20Microsoft%20Teams%20tables%20are%20reachable%3A%20Microsoft%20TEAMS%3C%2FP%3E%0A%3CP%3ETools%20to%20refer%20while%20troubleshooting%20Sign-in%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EFiddler%3C%2FLI%3E%0A%3CLI%3ELog%20files.txt%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3ETroubleshooting%20Examples%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EIn%20case%20of%20Firewall%20issue%20%E2%80%93%20You%20may%20see%20an%20HTTP%20response%20in%20Fiddler%20traces%20will%20suggest%20firewall%20is%20blocking%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106426i472E33FC9381699D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%224.jpg%22%20title%3D%224.jpg%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20**%26nbsp%3BScreen%20shot%20referred%20from%20demo%20pptx.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EExample%20of%20time%20out%20issue%20(Electron%20Log%20file)%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106427iEEEE96691B799566%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%225.jpg%22%20title%3D%225.jpg%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20**%26nbsp%3BScreen%20shot%20referred%20from%20demo%20pptx.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22font-weight%3A%20400%3B%22%3EExample%20of%20time-out%20issue%20(Fiddler%20Trace%2C%20Response%20Inspector)%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20714px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106428i0073546BAC1B0D1D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%226.jpg%22%20title%3D%226.jpg%22%20%2F%3E%3C%2FSPAN%3E%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B**%26nbsp%3BScreen%20shot%20referred%20from%20demo%20pptx.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHow%20does%20Teams%20Sign-In%20works%20in%20SSO%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F106430i65593DD05D81ABB8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Flow2.jpg%22%20title%3D%22Flow2.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERegards%3C%2FP%3E%0A%3CP%3EAamir%20Baig%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-420386%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECommunity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHow-to%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIT%20Pro%20Training%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-756925%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Teams%20sign%20in%20flow%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-756925%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20Aamir%3C%2FP%3E%3C%2FLINGO-BODY%3E
Aamir Baig
Microsoft

Hi Community,

 

Most of us always wondered how Microsoft Teams sign-in works?

Also to mention, Teams client sign in issue is one of the most common scenario for Helpdesk or Admins or Support Folks who are working in TEAMS troubleshooting filed.

 

I tried to find detailed article which talks about TEAMS Sign-in and found this which is no longer available. Hence posting it here as I had it archived in my OneNote (Credits goes to original owner Anurag Agarwal)

https://blogs.msdn.microsoft.com/anuagar/2017/10/15/microsoft-teams-teams-client-sign-in/

 

Before entering the troubleshooting phase, one should first understand the TEAMS Sign in process flow to identity what's expected and act accordingly. In this article, we will focus mainly on TEAMS Client login.

 

Flow1.jpg

 

 

 

 

  • How does Sign IN work?
  • The client reaches skype.comand start the bootstrap. Under JSON we should be able to view all features are enabled or not enabled:

1.jpg

 

 

22.jpg

 

 

 

  • A token will be generated and the client and can be verified on the 302 message from microsoftonline.com:

23.jpg

 

 

 

  • Token expires_in=3599 (1h)
  • From this point the client execute all the requests with the access token on the HTTP header:

2.jpg

 

 

  • How does the client identify where to register?
  • The client will always attempt to register to microsoft.comthat is the URL of the service.
  • Once registered, the client will POST to teams.skype.comthat will reply with a JSON with the services the client have to register:

3.jpg

 

 

  • The client do authenticated requests to the ams, chat service, middleTier, msImageService and search services on respective geographical region.

 

 

 

 

Log Collection:

Windows

MAC

Web logs

·       Press (CTRL+ALT+SHFT+1) in client to download logs (Electron Logs)
Note - be sure to use the 1 on top of keyboard and not 1 from number pad as that maps to a different key

·       %downloads%MSTeams Diagnostics Log .txt

Best logs to start with

Contains most all client activity

Desktop logs

·       %appdata%MicrosoftTeamslogs.txt

Contains framework and bootstrapping info

App Bootstrap process

Plugin initialization

Update Management

Some SSO info when using SSO builds (Desktop Auth)

 

Web logs

·       Press (Command+Option+SHFT+1) in client to download logs (Electron Logs)
Note - be sure to use the 1 on top of keyboard and not 1 from number pad as that maps to a different key

·       Downloadsmsteams Diagnostics Log .txt

Best logs to start with

Contains most all client activity

Desktop logs

·       ~/Library/Application Support/Microsoft/Teams/logs.txt

Contains framework and bootstrapping info

App Bootstrap process

Plugin initialization

Update Management

Some SSO info when using SSO builds (Desktop Auth)

 

 

 

Troubleshooting:

While troubleshooting TEAMS Sign-in we need to have answers to following questions. Once, you have answer to questions you have almost know the cause of it:

  • Was user able to sign in before?
    • Provisioning Issue?
  • How widespread is the sign-in failure?
    • 1 user, few users, All users in the tenant
  • What is the Repro rate?
    • Intermittent
    • Consistent
  • What clients are impacted?
    • Web
    • Windows
    • Mac
  • Networks where sign-in fails
    • Corp
    • VPN to Corp
    • Public Internet (Shopping complex, airports, etc)
  • Initial steps when investigating a sign in problem:
  • Issue is isolated to specific network
    • Likely cause is a Firewall blocking at a perimeter network
  • Issue is impacting all users everywhere
    • Likely cause is with entitlement or other issue authenticating to the service
      • Possible SSO or 2fA issue.
  • Gather app logs or web traffic tracing (Fiddler)
  • From bottom of the log search for key words
  • Example or "err_" or "error" or "failed"
  • From Fiddler trace, you can filter Example Process=Teams.exe
    • Search for anything unusual like a 4xx or 5xx response that suggests something is missing or there is an error. (Recommend opening "Raw" view in Inspectors)

 

To use Microsoft Teams, ensure both the FQDN and IP Address endpoints listed in the Microsoft Teams tables are reachable: Microsoft TEAMS

Tools to refer while troubleshooting Sign-in:

  1. Fiddler
  2. Log files.txt

Troubleshooting Examples:

  1. In case of Firewall issue – You may see an HTTP response in Fiddler traces will suggest firewall is blocking

        4.jpg                                                                                                                                                                                            ** Screen shot referred from demo pptx.

  • Example of time out issue (Electron Log file)

                      5.jpg                                                                                                                                                                              ** Screen shot referred from demo pptx.

  • Example of time-out issue (Fiddler Trace, Response Inspector)

                               6.jpg                                                                                                                                                                      ** Screen shot referred from demo pptx.

 

How does Teams Sign-In works in SSO

Flow2.jpg

 

Regards

Aamir Baig

 

1 Reply

Thank you Aamir

Related Conversations