AIP Scanner power shell commandlet failing

%3CLINGO-SUB%20id%3D%22lingo-sub-1352556%22%20slang%3D%22en-US%22%3EAIP%20Scanner%20power%20shell%20commandlet%20failing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1352556%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20power%20shell%20commandlets%20were%20working%20great%20for%20the%20last%201%20year%20or%20so%20but%20it%20is%20failing%20now%20with%20the%20message%20'error%20acquiring%20token'%20.The%20event%20viewer%20fires%20below%20message%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESet-AIPAuthentication-%26nbsp%3BwebAppId%20-webAppKey%26nbsp%3B%20%26nbsp%3B-nativeAppId%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CP%3EThe%20user%20or%20administrator%20has%20not%20consented%20to%20use%20the%20application%20with%20ID%20''%20named%20'AIPOnBehalfOf'.%20Send%20an%20interactive%20authorization%20request%20for%20this%20user%20and%20resource.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20did%20put%20the%20AIP%20scanner%20account%20and%20password%20and%20it%20did%20authenticate%20but%20no%20token%20still.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20let%20me%20know%20your%20thoughts%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EJag%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1352556%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAIP%20Scanner%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EInformation%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ERights%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1354784%22%20slang%3D%22en-US%22%3ERe%3A%20AIP%20Scanner%20power%20shell%20commandlet%20failing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1354784%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234025%22%20target%3D%22_blank%22%3E%40Jagadish%20Subramonayan%3C%2FA%3E%26nbsp%3BDid%20you%20doublecheck%20the%20app%20registration%3F%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Frms-client%2Fclient-admin-guide-powershell%23to-create-and-configure-the-azure-ad-applications-for-set-aipauthentication%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Frms-client%2Fclient-admin-guide-powershell%23to-create-and-configure-the-azure-ad-applications-for-set-aipauthentication%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELooks%20like%20admin%20consent%20is%20deleted%20from%20your%20app%20registration.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

The power shell commandlets were working great for the last 1 year or so but it is failing now with the message 'error acquiring token' .The event viewer fires below message 

 

Set-AIPAuthentication- webAppId -webAppKey   -nativeAppId 

 

The user or administrator has not consented to use the application with ID '' named 'AIPOnBehalfOf'. Send an interactive authorization request for this user and resource.

 

I did put the AIP scanner account and password and it did authenticate but no token still.

 

Please let me know your thoughts 

 

Thanks

Jag

1 Reply

@Jagadish Subramonayan Did you doublecheck the app registration? https://docs.microsoft.com/en-us/azure/information-protection/rms-client/client-admin-guide-powershe... 

 

Looks like admin consent is deleted from your app registration.