Teams desktop app for a colleague on their personal device at home with error CAA20002 + AADSTS80014

%3CLINGO-SUB%20id%3D%22lingo-sub-2048625%22%20slang%3D%22en-US%22%3ETeams%20desktop%20app%20for%20a%20colleague%20on%20their%20personal%20device%20at%20home%20with%20error%20CAA20002%20%2B%20AADSTS80014%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2048625%22%20slang%3D%22en-US%22%3E%3CP%3EDear%20Teams%20gurus%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ehave%20you%20ever%20come%20across%20this%20error%3F%26nbsp%3B%20Basically%20its%20a%203rd%20lockdown%20here%20in%20the%20UK%20so%20we%20are%20all%20back%20to%20remote%20learning.%3C%2FP%3E%3CP%3EOne%20of%20our%20teachers%20is%20experiencing%20a%20most%20peculiar%20problem%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThey%20can%20log%20into%20teams%20for%20our%20domain%20using%20the%20web%20version%3C%2FP%3E%3CP%3Ehowever%20the%20desktop%20app%20on%20their%20Windows10%20machine%20gave%20them%20an%20error%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eerror%20code%3A%2080090016%3C%2FP%3E%3CP%3Eserver%20message%3A%26nbsp%3B%20Keyset%20does%20not%20exist.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20searched%20%22wamerrors%26nbsp%3B%2080090016%26nbsp%3BKeyset%20does%20not%20exist%22.%26nbsp%3B%20and%20apparently%20this%20was%20to%20do%20with%20the%20TMP%20module%20on%20the%20Server%2C%20which%20seems%20unlikely%20to%20me%20as%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20connecting%20to%20M365%20and%3C%2FP%3E%3CP%3EThe%20computer%20the%20person%20is%20using%20is%20not%20a%20school%20computer%20but%20their%20own%20computer%20instead%20just%20logging%20into%20teams.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20originally%20asked%20them%20to%20sign%20out%20and%20when%20they%20sign%20back%20in%20to%20untick%20the%20box%20to%20%22allow%20my%20organisation%20to%20administer%20this%20device%22%20and%20to%20click%20the%20option%20for%20%22This%20app%20only%22%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ehowever%20that%20has%20not%20worked.%3C%2FP%3E%3CP%3EI%20then%20asked%20them%20o%20uninstall%20and%20reinstall%20and%20the%20person%20managed%20to%20log%20in%20for%20a%20few%20moments%20only%20to%20then%20get%20the%20latest%20error%26nbsp%3B%20(which%20is%20now%20different)%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eerror%20CAA20002%26nbsp%3B%3C%2FP%3E%3CP%3EServer%20message%3A%20AADSTS80014%20Validation%20request%20responded%20after%20maximum%20elapsed%20time%20exceeded.%3C%2FP%3E%3CP%3EThe%20person%20can%20still%20log%20in%20via%20Teams%20Web%2C%20however%20the%20app%20now%20does%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20next%20step%20was%20going%20to%20be%20closing%20teams%20completely%20then%20clearing%20the%20cache%2C%20however%20they%20are%20currently%20teaching%20using%20Teams%20web.%3C%2FP%3E%3CP%3Ewhilst%20i%20wait%20for%20them%20i%20thought%20i%20would%20ask%20fellow%20Teams%20admins%20in%20case%20anyone%20has%20come%20across%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20looked%20at%20azure%20AD%20and%20their%20settings%20look%20the%20same%20as%20other%20users%20and%20their%20private%20device%20isn't%20listed%20there.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20anyone%20ever%20come%20across%20this%20and%20are%20you%20able%20to%20offer%20any%20pointers%3F%3C%2FP%3E%3CP%3EThank%20you%20for%20any%20help%20you%20can%20give.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2048625%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2050239%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20desktop%20app%20for%20a%20colleague%20on%20their%20personal%20device%20at%20home%20with%20error%20CAA20002%20%2B%20AADSTS8%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2050239%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EHi%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EClear%20cache%20and%20maybe%20reinstall%20Teams%20is%20a%20good%20idea.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fcommsverse.blog%2F2018%2F09%2F28%2Fclear-the-microsoft-teams-client-cache%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EClear%20the%20Microsoft%20Teams%20Client%20Cache%20(commsverse.blog)%3C%2FA%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EAADSTS81004%20indicates%20that%20there%20is%20some%20problem%20with%20the%20SSO.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EAADSTS81004%20DesktopSsoIdentityInTicketIsNotAuthenticated%20-%20Kerberos%20authentication%20attempt%20failed.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fdevelop%2Freference-aadsts-error-codes%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20AD%20authentication%20%26amp%3B%20authorization%20error%20codes%20%7C%20Microsoft%20Docs%3C%2FA%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Dear Teams gurus,

 

have you ever come across this error?  Basically its a 3rd lockdown here in the UK so we are all back to remote learning.

One of our teachers is experiencing a most peculiar problem:

 

They can log into teams for our domain using the web version

however the desktop app on their Windows10 machine gave them an error:

 

error code: 80090016

server message:  Keyset does not exist.

 

I searched "wamerrors  80090016 Keyset does not exist".  and apparently this was to do with the TMP module on the Server, which seems unlikely to me as:

 

We are connecting to M365 and

The computer the person is using is not a school computer but their own computer instead just logging into teams.

 

I had originally asked them to sign out and when they sign back in to untick the box to "allow my organisation to administer this device" and to click the option for "This app only"  

 

however that has not worked.

I then asked them o uninstall and reinstall and the person managed to log in for a few moments only to then get the latest error  (which is now different):

 

error CAA20002 

Server message: AADSTS80014 Validation request responded after maximum elapsed time exceeded.

The person can still log in via Teams Web, however the app now does this.

 

My next step was going to be closing teams completely then clearing the cache, however they are currently teaching using Teams web.

whilst i wait for them i thought i would ask fellow Teams admins in case anyone has come across this.

 

I have looked at azure AD and their settings look the same as other users and their private device isn't listed there.

 

Has anyone ever come across this and are you able to offer any pointers?

Thank you for any help you can give.

 

2 Replies

Hi,

 

Clear cache and maybe reinstall Teams is a good idea.
Clear the Microsoft Teams Client Cache (commsverse.blog)

 

AADSTS81004 indicates that there is some problem with the SSO.

 

AADSTS81004 DesktopSsoIdentityInTicketIsNotAuthenticated - Kerberos authentication attempt failed.
Azure AD authentication & authorization error codes | Microsoft Docs

@Linus Cansby 

 

Thank you very much for this.

 

Unfortunately i am not going to get to try it now as the person was in a hurry and another colleague had to take it  up in my absence as i had to do something else.

 

I had seen other posts suggesting clearing the cache and that was going to be my next step but it wasn't to be i guess.

 

I hope this helps others in the same pickle.

 

Many thanks for your kind help.