The Known Issues of Az.Accounts 3.0.0 and Their Workarounds

[msJinLei]

1. The interactive login method cannot popup window for WAM (Fixed)

Report an error "User canceled authentication" Refer to AzureAD/microsoft-authentication-library-for-python#707

• Fixed in Az.Accounts 3.0.1

2. Azure PowerShell cmdlets are unable to run after login with DeviceCode and DeviceCode login methods will fail without -Tenant parameter (Mitigated)

• Mitigated in Az.Accounts 3.0.1
• Will be fixed in A.Accounts 3.0.5

3. Azure PowerShell cmdlets are unable to run after login with UserName+Password and UserName+Password login methods will fail without -Tenant parameter (Mitigated)

• Workaround of Az.Accounts 3.0.0
  • Login interactively with the same account on the same machine
  • If 1 is not applicable, disable WAM

Update-AzConfig -EnableLoginByWam $false

• Mitigated in Az.Accounts 3.0.1

4. WAM pop-up window to select an account is not easy to find

• Workaround: minimize other windows to look for the pop-up window carefully

Root case

Fail to get the right console handle. See AzureAD/microsoft-authentication-library-for-dotnet#4887

5 WAM pop-up window doesn't display "Work and school account" option

• Workaround

Update-AzConfig -EnableLoginByWam $false

Note

MSAL team is working on the issue see AzureAD/microsoft-authentication-library-for-dotnet#4797

6. The interactive login method cannot popup window for WAM in Window PowerShell ISE Console

• Workaround

Update-AzConfig -EnableLoginByWam $false

Note

Reported to MSAL team, see AzureAD/microsoft-authentication-library-for-dotnet#4796

7. The ExportAzSshConfig and EnterAzVMCommand from Az.Ssh are not able to use when WAM is enabled.

• Workaround

Update-AzConfig -EnableLoginByWam $false

• Will be fixed in A.Accounts 3.0.5

[slavizh]

What about #25003?

[weyCC81]

In ISE, on Windows 11 mine says the following, does this correlate?

# 12.0.0    Az
# 3.0.0     Az.Accounts
# 6.0.0     Az.KeyVault
Connect-AzAccount -Tenantid [TenantID] -Subscription [Subscription]
# > Connect-AzAccount : InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles 
# > Could not find tenant id for provided tenant domain '[TenantID]'. Please ensure that the provided user is found in the provided tenant domain.

[msJinLei]

What about #25003?

Thanks for reporting the issue. I reply in it.

[msJinLei]

In ISE, on Windows 11 mine says the following, does this correlate?

# 12.0.0    Az
# 3.0.0     Az.Accounts
# 6.0.0     Az.KeyVault
Connect-AzAccount -Tenantid [TenantID] -Subscription [Subscription]
# > Connect-AzAccount : InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles 
# > Could not find tenant id for provided tenant domain '[TenantID]'. Please ensure that the provided user is found in the provided tenant domain.

@weyCC81 Thanks for reporting the issue. I shall say yes

Please disable WAM to workaround it firstly

Update-AzConfig -EnableLoginByWam $false

[msJinLei]

In ISE, on Windows 11 mine says the following, does this correlate?

# 12.0.0    Az
# 3.0.0     Az.Accounts
# 6.0.0     Az.KeyVault
Connect-AzAccount -Tenantid [TenantID] -Subscription [Subscription]
# > Connect-AzAccount : InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles 
# > Could not find tenant id for provided tenant domain '[TenantID]'. Please ensure that the provided user is found in the provided tenant domain.

@weyCC81 Yes, we have reported your issue to MSAL AzureAD/microsoft-authentication-library-for-dotnet#4796

[spongemike2]

I get the same issue whenever I run from an elevated console window. Running the:

Update-AzConfig -EnableLoginByWam $false

...command fixes it.

[Alex-wdy]

We have solved the below issue in the latest version： Az.Accounts 3.0.1

1. The interactive login method cannot popup window for WAM
   We are still working on other issues and will update the progress gradually.

[RichardS013]

Using updated versions Az.Accounts 3.0.1 - 3.0.4 and it appears to still hang even after running cmdlet:
Update-AzConfig -EnableLoginByWam $false

[Alex-wdy]

Using updated versions Az.Accounts 3.0.1 - 3.0.4 and it appears to still hang even after running cmdlet: Update-AzConfig -EnableLoginByWam $false

Can you give me some more details? Normally, this issue should not exist.

[Alex-wdy]

2 and 7 issues will be released at Az.13.0.0 version.