Azure AD OIDC Error AADSTS700054 for Dashboard SSO
This article explains why the AADSTS700054 error occurs when attempting to sign in to the dashboard using Single Sign-On (SSO). The following error is found within an HTTP Archive (HAR) file:
- error: unsupported_response_type error_description: "AADSTS700054: response_type 'id_token' is not enabled for the application error_uri: https://login.microsoftonline.com/error?code=700054
This is followed by an access denied message:
- error: access_denied
- error_description: authorization response from the server is an error.
- Azure Active Directory (Azure AD)
- OpenID Connect (OIDC)
- Dashboard SSO
- Single Sign-On (SSO)
This issue occurs because the implicit grant flow is not enabled for the Identity Token (ID Token). Additionally, Azure AD does not include the email claim by default, which must be added as a custom claim to the ID Token.
To resolve this error for the dashboard connection, follow these steps:
- Enable the implicit grant for the ID Token.
- Add the email claim to the ID Token.
For more information, refer to Configure Single Sign-On for Dashboard.