Home
%3CLINGO-SUB%20id%3D%22lingo-sub-740074%22%20slang%3D%22en-US%22%3EAAD%20Device%20Token%20Authentication%20and%20Cloud%20Management%20Gateway%20(CMG)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-740074%22%20slang%3D%22en-US%22%3E%3C!--%20%5Bif%20!mso%5D%3E%0A%3Cstyle%3E%0Av%5C%3A*%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0Ao%5C%3A*%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0Aw%5C%3A*%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0A.shape%20%7Bbehavior%3Aurl(%23default%23VML)%3B%7D%0A%3C%2Fstyle%3E%0A%3C!%5Bendif%5D--%3E%3C!--%20%5Bif%20gte%20mso%209%5D%3E%3Cxml%3E%0A%20%3Co%3ADocumentProperties%3E%0A%20%20%3Co%3AAuthor%3ETajammul%20Mohammed%3C%2Fo%3AAuthor%3E%0A%20%20%3Co%3ATemplate%3ENormal%3C%2Fo%3ATemplate%3E%0A%20%20%3Co%3ALastAuthor%3ETajammul%20Mohammed%3C%2Fo%3ALastAuthor%3E%0A%20%20%3Co%3ARevision%3E2%3C%2Fo%3ARevision%3E%0A%20%20%3Co%3ATotalTime%3E8%3C%2Fo%3ATotalTime%3E%0A%20%20%3Co%3ACreated%3E2019-07-05T16%3A18%3A00Z%3C%2Fo%3ACreated%3E%0A%20%20%3Co%3ALastSaved%3E2019-07-05T16%3A18%3A00Z%3C%2Fo%3ALastSaved%3E%0A%20%20%3Co%3APages%3E1%3C%2Fo%3APages%3E%0A%20%20%3Co%3AWords%3E1318%3C%2Fo%3AWords%3E%0A%20%20%3Co%3ACharacters%3E7517%3C%2Fo%3ACharacters%3E%0A%20%20%3Co%3ALines%3E62%3C%2Fo%3ALines%3E%0A%20%20%3Co%3AParagraphs%3E17%3C%2Fo%3AParagraphs%3E%0A%20%20%3Co%3ACharactersWithSpaces%3E8818%3C%2Fo%3ACharactersWithSpaces%3E%0A%20%20%3Co%3AVersion%3E16.00%3C%2Fo%3AVersion%3E%0A%20%3C%2Fo%3ADocumentProperties%3E%0A%20%3Co%3ACustomDocumentProperties%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled%20dt%3Adt%3D%22string%22%3ETrue%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId%20dt%3Adt%3D%22string%22%3E72f988bf-86f1-41af-91ab-2d7cd011db47%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner%20dt%3Adt%3D%22string%22%3Emotaj%40microsoft.com%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate%20dt%3Adt%3D%22string%22%3E2019-07-02T03%3A03%3A30.9643158Z%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name%20dt%3Adt%3D%22string%22%3EGeneral%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application%20dt%3Adt%3D%22string%22%3EMicrosoft%20Azure%20Information%20Protection%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId%20dt%3Adt%3D%22string%22%3E7bcb6bdb-cd6c-44b7-b274-59a19b758e58%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId%3E%0A%20%20%3Co%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method%0A%20%20%20dt%3Adt%3D%22string%22%3EAutomatic%3C%2Fo%3AMSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method%3E%0A%20%20%3Co%3ASensitivity%20dt%3Adt%3D%22string%22%3EGeneral%3C%2Fo%3ASensitivity%3E%0A%20%3C%2Fo%3ACustomDocumentProperties%3E%0A%20%3Co%3AOfficeDocumentSettings%3E%0A%20%20%3Co%3AAllowPNG%3E%3C%2Fo%3AAllowPNG%3E%0A%20%3C%2Fo%3AOfficeDocumentSettings%3E%0A%3C%2Fxml%3E%3C!%5Bendif%5D--%3E%0A%3CP%3E%3CSPAN%3EHi%2C%20my%20name%20is%20Taj%20Mohammed%2C%20I%20am%20a%20PFE%20working%20in%20the%20US%20primarily%20with%20SCCM.%26nbsp%3B%3C%2FSPAN%3EThis%20is%20a%20continuation%20of%20my%20other%20blog%20titled%20Importing%20Apps%20to%20set%20up%20Cloud%20Management%20Gateway%20for%20Configuration%20Manager.%20In%20this%20blog%2C%20we%20will%20be%20looking%20at%20AAD%20Device%20Token%20Authentication%20pre-requisites.%3C%2FP%3E%0A%3CDIV%20class%3D%22WordSection1%22%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWhy%20do%20we%20need%20AAD%20Device%20token%20to%20work%3F%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIf%20we%20want%20the%20devices%20to%20be%20managed%20when%20no%20user%20is%20logged%20in.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EHow%20do%20we%20know%20if%20Device%20token%20is%20not%20working%3F%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWindows%5CCCM%5CLogs%5CADALOperationProvider.log%20is%20a%20good%20place%20to%20confirm%20and%20following%20is%20a%20common%20error%20we%20see%20when%20there%20is%20an%20issue.%20Error%20usually%20%3CSPAN%20class%3D%22GramE%22%3Efollows%20%3C%2FSPAN%3E%22%3CI%3EGetting%20AAD%20(device)%20token%3C%2FI%3E%22%20entry%20as%20seen%20below.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3EGetting%20AAD%20(device)%20token%20with%3A%3C%2FSPAN%3E%3C%2FI%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20%3CSPAN%20class%3D%22SpellE%22%3EClientId%3C%2FSPAN%3E%20%3D%20e234afc5-70f6-44fc-9063-f42ddf30c954%2C%20%3CSPAN%20class%3D%22SpellE%22%3EResourceUrl%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2FConfigMgrCMG%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2FConfigMgrCMG%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EAccountId%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EADALOperationProvider%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIWebAuthenticationCoreManagerStatics4%20not%20available.%20Falling%20back%20to%20user%20token.%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EADALOperationProvider%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22GramE%22%3EBlockOnCompletionAndGetResults(%3C%2FSPAN%3EspWebAccountProviderOperation.Get()%2C%20%26amp%3B%3CSPAN%20class%3D%22SpellE%22%3EspProvider%3C%2FSPAN%3E)%2C%20HRESULT%3D800703f0%20(..%5CToken.cpp%2C531)%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EADALOperationProvider%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20red%3B%22%3EFailed%20to%20get%20AAD%20%3CSPAN%20class%3D%22GramE%22%3Etoken..%3C%2FSPAN%3E%20%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EAn%20attempt%20was%20made%20to%20reference%20a%20token%20that%20does%20not%20exist.%20(Error%3A%20800703F0%3B%20Source%3A%20%3CSPAN%20class%3D%22GramE%22%3EWindows)%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EADALOperationProvider%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECcmGetAADTokenFromWAM%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22GramE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E(%20%3CSPAN%20class%3D%22SpellE%22%3EsClientId.c%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E_str%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E()%2C%20%3CSPAN%20class%3D%22SpellE%22%3EsResourceUri.c_str%3C%2FSPAN%3E()%2C%20%3CSPAN%20class%3D%22SpellE%22%3EsAccountId.c_str%3C%2FSPAN%3E()%2C%20%3CSPAN%20class%3D%22SpellE%22%3EbForDevice%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EsToken%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EsAADUserId%3C%2FSPAN%3E%20)%2C%20HRESULT%3D800703f0%20(..%5CCcmToken.cpp%2C2293)%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EADALOperationProvider%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20red%3B%22%3EFailed%20to%20get%20AAD%20token%20for%20'S-1-5-18'%20from%20WAM%20API.%20Error%200x800703f0%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EADALOperationProvider%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22font-size%3A%2019.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20red%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EFollowing%20are%20the%20pre-requisites%20for%20AAD%20Device%20Token%20to%20work.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3ESCCM%201806%20or%20higher%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3EDevices%20running%20Win%2010%20version%20must%20be%201803%20or%20higher%20and%20Hybrid%20AAD%20joined.%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3EServer%2FWeb%20App%20must%20be%20enabled%20for%20Device%20Token%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThe%20first%20two%20are%20straightforward.%20How%20can%20we%20ensure%20Server%2FWeb%20App%20is%20enabled%20for%20Device%20token%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIf%20you%20have%20let%20SCCM%20create%2Fregister%20the%20Apps%20(Server%2FWeb%20and%20Client%2FNative)%20automatically%20from%20SCCM%20console%2C%20most%20likely%20the%20Server%20App%20is%20configured%20correctly.%20If%20you%20have%20registered%20the%20Apps%20manually%20in%20Azure%20and%20imported%20them%20in%20SCCM%2C%20you%20would%20have%20to%20patch%2Fupdate%20the%20App%20by%20running%20%22%3CSTRONG%3EUpdate%20Application%20Settings%3C%2FSTRONG%3E%22.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122357i7ADBE8CDA154627C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image002.jpg%22%20title%3D%22image002.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EUpdate%20may%20fail%20with%20%22%3CSTRONG%3EFailed%20to%20update%20settings%20for%20the%20application.%20For%20more%20information%2C%20see%20SMSAdminUI.log%3C%2FSTRONG%3E%22%20and%20following%20error%20in%20SMSAdminUi.log%2C%20if%20you%20are%20running%20Pre-1810%20HFRU2%20version%20of%20SCCM.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20mso-no-proof%3A%20yes%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20585px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122358iB1F0DE607BD1B015%2Fimage-dimensions%2F585x222%3Fv%3D1.0%22%20width%3D%22585%22%20height%3D%22222%22%20alt%3D%22image004.jpg%22%20title%3D%22image004.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22line-height%3A%20normal%3B%20margin%3A%2010.0pt%200in%20.0001pt%200in%3B%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3EMicrosoft.ConfigurationManagement.ManagementProvider.SmsException%3C%2FSPAN%3E%3C%2FI%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20red%3B%22%3EFailed%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20red%3B%22%3E%20to%20update%20settings%20for%20the%20application%3C%2FSPAN%3E%3C%2FI%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3E.%20For%20more%20information%2C%20see%20SmsAdminUI.log.%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20%3CSPAN%20class%3D%22GramE%22%3EMicrosoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADUtilities.RefreshAppSettings%3C%2FSPAN%3E(Object%20sender%2C%20%3CSPAN%20class%3D%22SpellE%22%3EScopeNode%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22SpellE%22%3EscopeNode%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EActionDescription%3C%2FSPAN%3E%20action%2C%20%3CSPAN%20class%3D%22SpellE%22%3EIResultObject%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22SpellE%22%3EselectedResultObject%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EPropertyDataUpdated%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22SpellE%22%3EdataUpdatedDelegate%3C%2FSPAN%3E%2C%20Status%20status)%20One%20or%20more%20errors%20%3CSPAN%20class%3D%22SpellE%22%3Eoccurred.System.AggregateExceptionOne%3C%2FSPAN%3E%20or%20more%20errors%20occurred.%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20%3CSPAN%20class%3D%22SpellE%22%3ESystem.Threading.Tasks.Task.ThrowIfExceptional%3C%2FSPAN%3E(Boolean%20%3CSPAN%20class%3D%22SpellE%22%3EincludeTaskCanceledExceptions%3C%2FSPAN%3E)%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20System.Threading.Tasks.Task%601.GetResultCore(Boolean%20%3CSPAN%20class%3D%22SpellE%22%3EwaitCompletionNotification%3C%2FSPAN%3E)%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20System.Threading.Tasks.Task%601.get_Result()%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADDataHandler.AssignAndGrantPermissionOnServerApplication()%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3Eat%3C%2FSPAN%3E%20Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADUtilities.RefreshAppSettings(Object%20sender%2C%20%3CSPAN%20class%3D%22SpellE%22%3EScopeNode%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22SpellE%22%3EscopeNode%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EActionDescription%3C%2FSPAN%3E%20action%2C%20%3CSPAN%20class%3D%22SpellE%22%3EIResultObject%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22SpellE%22%3EselectedResultObject%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EPropertyDataUpdated%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22SpellE%22%3EdataUpdatedDelegate%3C%2FSPAN%3E%2C%20Status%20status)%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20style%3D%22background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3ESystem.ArgumentNullExceptionValue%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20style%3D%22background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3E%20cannot%20be%20%3CSPAN%20class%3D%22SpellE%22%3Enull.Parameter%3C%2FSPAN%3E%20name%3A%20type%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThe%20above%20issue%20is%20fixed%20in%201810%20HFRU2.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIn%20a%20situation%20where%20you%20are%20either%20unable%20to%20upgrade%20to%201810%20HFRU2%20or%20higher%20to%20resolve%20the%20update%20issue%20and%20still%20want%20to%20enable%20Device%20Token%20Authentication%20or%20you%20are%20just%20looking%20to%20confirm%20if%20the%20device%20token%20is%20enabled%20on%20the%20Server%2FWeb%20App%2C%20you%20can%20use%20Azure%20Graph%20Explorer%20%3C%2FSPAN%3E%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fge%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttp%3A%2F%2Faka.ms%2Fge%20%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Eto%20query%20App%20properties%20and%20also%20make%20modifications.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EGo%20to%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22http%3A%2F%2Faka.ms%2Fge%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttp%3A%2F%2Faka.ms%2Fge%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Eand%20Sign%20in%20with%20Global%20Admin%20credentials.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122359i44B2C7F606103840%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image006.jpg%22%20title%3D%22image006.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EAzure%20Graph%20Explorer%20won't%20allow%20you%20to%20query%20or%20make%20changes%20to%20the%20App%20properties%20by%20default.%20Select%26nbsp%3B%3CSTRONG%3Emodify%20permissions%3C%2FSTRONG%3Eto%20grant%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CSTRONG%3EDirectory.AccessasUser.All%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FSPAN%3Epermission%20to%20the%20Signed%20in%20user%2C%20which%20grants%20access%20to%20query%20and%20modify%20App%20properties.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122360i35F4D511F83A9533%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image008.jpg%22%20title%3D%22image008.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EGrant%20access%20to%20Graph%20explorer%20to%20access%20the%20directory%20as%20you.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20456px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122362i69F4E2AD13D128E9%2Fimage-dimensions%2F456x487%3Fv%3D1.0%22%20width%3D%22456%22%20height%3D%22487%22%20alt%3D%22image009.png%22%20title%3D%22image009.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESelect%20%3CSTRONG%3Eretrieve%20the%20list%20of%20applications%3C%2FSTRONG%3E%20from%20the%20list%20of%20queries%20under%20%3CSTRONG%3EApplications%20(beta)%3C%2FSTRONG%3E%20to%20see%20the%20list%20of%20registered%20Apps.%20You%20can%20highlight%20%22Response%20Preview%22%20area%20and%20press%20%3CSPAN%20class%3D%22SpellE%22%3ECtrl%2BF%3C%2FSPAN%3Eto%20search%20the%20Server%20App%20you%20are%20interested%20in.%20This%20may%20be%20handy%20when%20there%20are%20several%20Apps.%20The%20property%20we%20are%20interested%20in%20is%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSTRONG%3E%3CI%3EisDeviceOnlyAuthSupported%3C%2FI%3E%3C%2FSTRONG%3E%3C%2FSPAN%3E.%20If%20this%20is%20set%20to%20%22%3CSTRONG%3Enull%3C%2FSTRONG%3E%22%20as%20you%20see%20below%2C%20it%20means%20Device%20Token%20is%20not%20enabled.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122366i9CF035764564B285%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image011.jpg%22%20title%3D%22image011.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ELooking%20at%20some%20of%20output%20closely%2C%20we%20see%20two%20IDs%20here%2C%20%3CSTRONG%3Eid%3C%2FSTRONG%3Eand%20%3CSTRONG%3E%3CSPAN%20class%3D%22SpellE%22%3Eappid%3C%2FSPAN%3E%3C%2FSTRONG%3E.%20We%20are%20interested%20in%20%3CSTRONG%3Eid%20%3C%2FSTRONG%3Ewhen%20running%20the%20query.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%7B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%22id%22%3A%20%22%3CSTRONG%3Edfd44c17-459a-451e-8f4a-c635a497a1ea%3C%2FSTRONG%3E%22%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%22%3CSPAN%20class%3D%22SpellE%22%3EdeletedDateTime%3C%2FSPAN%3E%22%3A%20null%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%22%3CSPAN%20class%3D%22SpellE%22%3EisFallbackPublicClient%3C%2FSPAN%3E%22%3A%20null%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%22%3CSPAN%20class%3D%22SpellE%22%3EappId%3C%2FSPAN%3E%22%3A%20%225df94352-894e-4ee6-9219-df787ba6e578%22%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%22%3CSPAN%20class%3D%22SpellE%22%3EapplicationTemplateId%3C%2FSPAN%3E%22%3A%20null%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%22%3CSPAN%20class%3D%22SpellE%22%3EidentifierUris%3C%2FSPAN%3E%22%3A%20%5B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%22%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2FCMGConfigMgrService%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2FCMGConfigMgrService%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%22%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%5D%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESelect%3CSTRONG%3Eupdate%20application%20properties%3C%2FSTRONG%3Efrom%20the%20list%20of%20queries%20on%20the%20left%20and%20you%20will%20see%20a%20new%20query%20formed%2C%20which%20allows%20you%20to%20insert%20the%20%3CEM%3Eid%3C%2FEM%3Ein%20curly%20brackets.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122367iD94D48C09C83B46E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image013.jpg%22%20title%3D%22image013.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EUnder%20%3CSTRONG%3ERequest%20Body%2C%3C%2FSTRONG%3Ehave%20the%20property%20we%20are%20going%20to%20update%2Fpatch%20as%20shown%20below%20and%20make%20sure%20the%20query%20type%20is%20%22%3CSTRONG%3EPatch%3C%2FSTRONG%3E%22.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%7B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%22%3CSPAN%20class%3D%22SpellE%22%3EisDeviceOnlyAuthSupported%3C%2FSPAN%3E%22%3A%20%22true%22%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%7D%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EYou%20will%20see%20%3CSTRONG%3ESuccess%20-%20Status%20Code%20204%20%3C%2FSTRONG%3Eif%20the%20changes%20were%20successful.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122368i9E5133074AB93957%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image015.jpg%22%20title%3D%22image015.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ERun%20%3CSTRONG%3Eretrieve%20application%20properties%3C%2FSTRONG%3E%26nbsp%3Bquery%20again%20to%20confirm%20the%20changes.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122369i27B66EDF81AF7DF2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image017.jpg%22%20title%3D%22image017.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EHow%20do%20we%20know%20AAD%20Device%20token%20is%20working%20after%20making%20the%20above%20changes%3F%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECheck%20Windows%5CCCM%5CLogs%5C%3CSTRONG%3EADALOperationProvider.log%3C%2FSTRONG%3E.%20If%20you%20don't%20see%20%22%3CI%3EGetting%20AAD%20(device)%20token%22%3C%2FI%3Eentry%20followed%20by%20an%20error%20as%20shown%20below%2C%20it%20is%20working.%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122370iA79D6D2AFC99E293%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image019.jpg%22%20title%3D%22image019.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EGetting%20AAD%20(device)%20token%20with%3A%20%3CSPAN%20class%3D%22SpellE%22%3EClientId%3C%2FSPAN%3E%20%3D%20387b3bc8-de92-48f2-980f-c196a9669e5e%2C%20%3CSPAN%20class%3D%22SpellE%22%3EResourceUrl%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2FCMGConfigMgrService%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2FCMGConfigMgrService%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EAccountId%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BADALOperationProvider%3C%2FSPAN%3E%3C%2FI%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EGetting%20AAD%20(user)%20token%20with%3A%20%3CSPAN%20class%3D%22SpellE%22%3EClientId%3C%2FSPAN%3E%20%3D%20387b3bc8-de92-48f2-980f-c196a9669e5e%2C%20%3CSPAN%20class%3D%22SpellE%22%3EResourceUrl%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2FCMGConfigMgrService%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2FCMGConfigMgrService%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EAccountId%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BADALOperationProvider%3C%2FSPAN%3E%3C%2FI%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EGetting%20AAD%20(user)%20token%20with%3A%20%3CSPAN%20class%3D%22SpellE%22%3EClientId%3C%2FSPAN%3E%20%3D%20387b3bc8-de92-48f2-980f-c196a9669e5e%2C%20%3CSPAN%20class%3D%22SpellE%22%3EResourceUrl%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2FCMGConfigMgrService%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2FCMGConfigMgrService%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EAccountId%3C%2FSPAN%3E%20%3D%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Ftoken%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BADALOperationProvider%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EOnce%20the%20device%20token%20works%2C%20the%20request%20is%20sent%20to%20internal%20MP%20via%20CMG%20to%20get%20a%20CCM%20token.%20Client%20must%20get%20a%20CCM%20token%20successfully%20before%20accessing%20internal%20resources.%20CCM_STS.log%20available%20on%20the%20Management%20Point%20enabled%20for%20CMG%20traffic%20is%20a%20good%20place%20to%20know%20if%20CCM%20token%20was%20issued%20successfully.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EProcessRequest%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20-%20Start%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%3C%2FSPAN%3E%3C%2FI%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EValidated%20AAD%20token.%20%3CSPAN%20class%3D%22SpellE%22%3ETokenType%3C%2FSPAN%3E%3A%20Device%20%3CSPAN%20class%3D%22SpellE%22%3ETenantId%3C%2FSPAN%3E%3A%20b02d4d89-e6d5-4b3d-b072-3457aa833ec4%20%3CSPAN%20class%3D%22SpellE%22%3EUserId%3C%2FSPAN%3E%3A%2000000000-0000-0000-0000-000000000000%20%3CSPAN%20class%3D%22SpellE%22%3EDeviceId%3C%2FSPAN%3E%3A%20db94ed37-c03c-4d44-8d0a-97cac0187e6f%20%3CSPAN%20class%3D%22SpellE%22%3EOnPrem_UserSid%3C%2FSPAN%3E%3A%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EOnPrem_DeviceSid%3C%2FSPAN%3E%3A%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ETokenType%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20is%20Device%2C%20use%20UDA%20for%20now%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%3C%2FSPAN%3E%3C%2FI%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECreated%20SCCM%20token%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIssued%20SCCM%20token%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EReturn%20token%20to%20client%2C%20token%20type%3A%20UDA%2C%20%3CSPAN%20class%3D%22SpellE%22%3EhierarchyId%3C%2FSPAN%3E%3A%203a25dd9f-b871-4b26-87c0-81ab03a43375%2C%20%3CSPAN%20class%3D%22SpellE%22%3EuserId%3C%2FSPAN%3E%3A%2000000000-0000-0000-0000-000000000000%2C%20%3CSPAN%20class%3D%22SpellE%22%3EdeviceId%3C%2FSPAN%3E%3A%20GUID%3A8AAE207C-880C-45C5-BC3A-16919E85F6F2%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BElapsed%20time%3A%20743%20%3CSPAN%20class%3D%22SpellE%22%3Ems%3C%2FSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIf%20you%20have%20just%20updated%20Device%20token%20property%20and%20seeing%20401%20error%20in%20CCM_STS.log%2C%20advise%20is%20to%20give%20it%20some%20time%20for%20it%20to%20catch%20up.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EProcessRequest%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20-%20Start%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%3C%2FSPAN%3E%3C%2FI%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20%23e84c22%3B%22%3EReturn%20code%3A%20401%2C%20Description%3A%20No%20bearer%20token%20found%20in%20request%2C%20%3CSPAN%20class%3D%22GramE%22%3ENo%3C%2FSPAN%3E%20bearer%20token%20found%20in%20request%3C%2FSPAN%3E%3C%2FI%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%3C%2FSPAN%3E%3C%2FI%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EElapsed%20time%3A%201%20%3CSPAN%20class%3D%22SpellE%22%3Ems%3C%2FSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BCCM_STS%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EOnce%20the%20CCM_STS.log%20indicates%20successful%20retrieval%20of%20CCM%20token%2C%20you%20can%20look%20at%20CCMmessaging.log%20on%20the%20client%20and%20also%20add%20%3CSTRONG%3EDevice%20Online%20From%20Internet%3C%2FSTRONG%3Eand%3CSTRONG%3EDevice%20Online%20Management%20Point%3C%2FSTRONG%3Ecolumns%20to%20%3CEM%3EDevices%3C%2FEM%3Eview%20in%20the%20console%20to%20confirm%20successful%20communication%20with%20CMG.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122374i1A65627C601750FB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image021.jpg%22%20title%3D%22image021.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011pt%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122372i5284FD31783A3599%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image023.jpg%22%20title%3D%22image023.jpg%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThank%20you%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin-bottom%3A%20.0001pt%3B%20line-height%3A%20normal%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-fareast-font-family%3A%20'Times%20New%20Roman'%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ETaj%20Mohammed%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-740074%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHi%2C%20my%20name%20is%20Taj%20Mohammed%2C%20I%20am%20a%20PFE%20working%20in%20the%20US%20primarily%20with%20SCCM.%26nbsp%3B%3C%2FSPAN%3EThis%20is%20a%20continuation%20of%20my%20other%20blog%20titled%20Importing%20Apps%20to%20set%20up%20Cloud%20Management%20Gateway%20for%20Configuration%20Manager.%20In%20this%20blog%2C%20we%20will%20be%20looking%20at%20AAD%20Device%20Token%20Authentication%20pre-requisites.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-740074%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ETajMohammed%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft

Hi, my name is Taj Mohammed, I am a PFE working in the US primarily with SCCM. This is a continuation of my other blog titled Importing Apps to set up Cloud Management Gateway for Configuration Manager. In this blog, we will be looking at AAD Device Token Authentication pre-requisites.

 

Why do we need AAD Device token to work?

 

If we want the devices to be managed when no user is logged in. 

 

How do we know if Device token is not working?

 

Windows\CCM\Logs\ADALOperationProvider.log is a good place to confirm and following is a common error we see when there is an issue. Error usually follows "Getting AAD (device) token" entry as seen below.

 

Getting AAD (device) token with: ClientId = e234afc5-70f6-44fc-9063-f42ddf30c954, ResourceUrl = https://ConfigMgrCMG, AccountId = https://login.microsoftonline.com/common/oauth2/token    ADALOperationProvider   

IWebAuthenticationCoreManagerStatics4 not available. Falling back to user token.    ADALOperationProvider    BlockOnCompletionAndGetResults(spWebAccountProviderOperation.Get(), &spProvider), HRESULT=800703f0 (..\Token.cpp,531)    ADALOperationProvider   

Failed to get AAD token..

An attempt was made to reference a token that does not exist. (Error: 800703F0; Source: Windows)    ADALOperationProvider   

CcmGetAADTokenFromWAM( sClientId.c_str(), sResourceUri.c_str(), sAccountId.c_str(), bForDevice, sToken, sAADUserId ), HRESULT=800703f0 (..\CcmToken.cpp,2293)    ADALOperationProvider   

Failed to get AAD token for 'S-1-5-18' from WAM API. Error 0x800703f0    ADALOperationProvider   

 

Following are the pre-requisites for AAD Device Token to work.

 

  • SCCM 1806 or higher
  • Devices running Win 10 version must be 1803 or higher and Hybrid AAD joined.
  • Server/Web App must be enabled for Device Token

 

The first two are straightforward. How can we ensure Server/Web App is enabled for Device token?

 

If you have let SCCM create/register the Apps (Server/Web and Client/Native) automatically from SCCM console, most likely the Server App is configured correctly. If you have registered the Apps manually in Azure and imported them in SCCM, you would have to patch/update the App by running "Update Application Settings".

 

image002.jpg

 

Update may fail with "Failed to update settings for the application. For more information, see SMSAdminUI.log" and following error in SMSAdminUi.log, if you are running Pre-1810 HFRU2 version of SCCM.

 

image004.jpg

Microsoft.ConfigurationManagement.ManagementProvider.SmsExceptionFailed to update settings for the application. For more information, see SmsAdminUI.log.   at Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADUtilities.RefreshAppSettings(Object sender, ScopeNode scopeNode, ActionDescription action, IResultObject selectedResultObject, PropertyDataUpdated dataUpdatedDelegate, Status status) One or more errors occurred.System.AggregateExceptionOne or more errors occurred.   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)   at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)   at System.Threading.Tasks.Task`1.get_Result()   at Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADDataHandler.AssignAndGrantPermissionOnServerApplication()   at Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADUtilities.RefreshAppSettings(Object sender, ScopeNode scopeNode, ActionDescription action, IResultObject selectedResultObject, PropertyDataUpdated dataUpdatedDelegate, Status status)System.ArgumentNullExceptionValue cannot be null.Parameter name: type

 

The above issue is fixed in 1810 HFRU2.

 

In a situation where you are either unable to upgrade to 1810 HFRU2 or higher to resolve the update issue and still want to enable Device Token Authentication or you are just looking to confirm if the device token is enabled on the Server/Web App, you can use Azure Graph Explorer http://aka.ms/ge to query App properties and also make modifications.

 

Go to http://aka.ms/ge and Sign in with Global Admin credentials.

 

image006.jpg

 

Azure Graph Explorer won't allow you to query or make changes to the App properties by default. Select modify permissions to grant Directory.AccessasUser.All permission to the Signed in user, which grants access to query and modify App properties.

 

image008.jpg

 

Grant access to Graph explorer to access the directory as you.

 

image009.png

 

Select retrieve the list of applications from the list of queries under Applications (beta) to see the list of registered Apps. You can highlight "Response Preview" area and press Ctrl+F to search the Server App you are interested in. This may be handy when there are several Apps. The property we are interested in is isDeviceOnlyAuthSupported. If this is set to "null" as you see below, it means Device Token is not enabled.

 

image011.jpg

 

Looking at some of output closely, we see two IDs here, id and appid. We are interested in id when running the query.

{

            "id": "dfd44c17-459a-451e-8f4a-c635a497a1ea",

            "deletedDateTime": null,

            "isFallbackPublicClient": null,

            "appId": "5df94352-894e-4ee6-9219-df787ba6e578",

            "applicationTemplateId": null,

            "identifierUris": [

                "https://CMGConfigMgrService"

            ],

Select update application properties from the list of queries on the left and you will see a new query formed, which allows you to insert the id in curly brackets.

 

image013.jpg

 

Under Request Body, have the property we are going to update/patch as shown below and make sure the query type is "Patch".

 

{

  "isDeviceOnlyAuthSupported": "true"

}

 

You will see Success - Status Code 204 if the changes were successful.

 

image015.jpg

 

 

Run retrieve application properties query again to confirm the changes.

 

image017.jpg

 

How do we know AAD Device token is working after making the above changes?

 

Check Windows\CCM\Logs\ADALOperationProvider.log. If you don't see "Getting AAD (device) token" entry followed by an error as shown below, it is working. 

 

image019.jpg

 

Getting AAD (device) token with: ClientId = 387b3bc8-de92-48f2-980f-c196a9669e5e, ResourceUrl = https://CMGConfigMgrService, AccountId = https://login.microsoftonline.com/common/oauth2/token        ADALOperationProvider        

Getting AAD (user) token with: ClientId = 387b3bc8-de92-48f2-980f-c196a9669e5e, ResourceUrl = https://CMGConfigMgrService, AccountId = https://login.microsoftonline.com/common/oauth2/token        ADALOperationProvider        

Getting AAD (user) token with: ClientId = 387b3bc8-de92-48f2-980f-c196a9669e5e, ResourceUrl = https://CMGConfigMgrService, AccountId = https://login.microsoftonline.com/common/oauth2/token        ADALOperationProvider

 

Once the device token works, the request is sent to internal MP via CMG to get a CCM token. Client must get a CCM token successfully before accessing internal resources. CCM_STS.log available on the Management Point enabled for CMG traffic is a good place to know if CCM token was issued successfully.

 

ProcessRequest - Start        CCM_STS        

Validated AAD token. TokenType: Device TenantId: b02d4d89-e6d5-4b3d-b072-3457aa833ec4 UserId: 00000000-0000-0000-0000-000000000000 DeviceId: db94ed37-c03c-4d44-8d0a-97cac0187e6f OnPrem_UserSid:  OnPrem_DeviceSid:          CCM_STS        

TokenType is Device, use UDA for now        CCM_STS        

Created SCCM token        CCM_STS        

Issued SCCM token        CCM_STS        

Return token to client, token type: UDA, hierarchyId: 3a25dd9f-b871-4b26-87c0-81ab03a43375, userId: 00000000-0000-0000-0000-000000000000, deviceId: GUID:8AAE207C-880C-45C5-BC3A-16919E85F6F2        CCM_STS        Elapsed time: 743 ms        CCM_STS        

 

If you have just updated Device token property and seeing 401 error in CCM_STS.log, advise is to give it some time for it to catch up.

 

ProcessRequest - Start        CCM_STS        

Return code: 401, Description: No bearer token found in request, No bearer token found in request        CCM_STS        

Elapsed time: 1 ms        CCM_STS

 

Once the CCM_STS.log indicates successful retrieval of CCM token, you can look at CCMmessaging.log on the client and also add Device Online From Internet and Device Online Management Point columns to Devices view in the console to confirm successful communication with CMG.

 image021.jpg 

 

image023.jpg 

 

 

Thank you,

 

Taj Mohammed