Azure AD OIDC Error AADSTS700054 for Dashboard SSO

Overview

This article explains why the AADSTS700054 error occurs when attempting to sign in to the dashboard using Single Sign-On (SSO). The following error is found within an HTTP Archive (HAR) file:

 

This is followed by an access denied message:

  • error: access_denied
  • error_description: authorization response from the server is an error.
Applies To
  • Azure Active Directory (Azure AD)
  • OpenID Connect (OIDC)
  • Dashboard SSO
  • Single Sign-On (SSO)
Cause

This issue occurs because the implicit grant flow is not enabled for the Identity Token (ID Token). Additionally, Azure AD does not include the email claim by default, which must be added as a custom claim to the ID Token.

Solution

To resolve this error for the dashboard connection, follow these steps:

  1. Enable the implicit grant for the ID Token.
  2. Add the email claim to the ID Token.

For more information, refer to Configure Single Sign-On for Dashboard.

Recommended content

No recommended content found...