Auth0 Azure Active Directory Connection Fails With "failed to obtain access token" and "AADSTS50146" Errors

Auth0 fails to authenticate an Azure Active Directory (Azure AD) connection due to a misconfigured application or Client Secret in Azure AD. Resolving this requires verifying the Client Secret configuration or contacting Microsoft support for Azure AD configuration assistance. Auth0 displays the following error when attempting to authenticate with an Azure AD connection after configuring an application in Azure AD:

"error": { "message": "failed to obtain access token", "oauthError": "invalid_request", "payload": "{"error":"invalid_request","error_description":"AADSTS50146: This application is required to be configured with an application-specific signing key. It is either not configured with one, or the key has expired or is not yet valid.", "type": "request-error" }

Review the following steps that reproduce the issue:

1. Configure an application in Azure AD with the necessary permissions.
2. Obtain a Client Secret from Azure AD and ensure it is active and correctly configured.
3. Configure the Auth0 application with the Client ID and Client Secret from Azure AD (Entra ID).
4. Attempt to authenticate the application through Auth0.

• Auth0
• Error AADSTS50146
• Azure Active Directory (Azure AD) / Entra ID Connection
• Windows Live Social Connection

A misconfiguration of the application on the Azure AD (Entra ID) side causes this error. A misconfigured Client Secret also causes this error.

How is the Azure AD access token error resolved?

Review the Auth0 troubleshooting documentation or contact Microsoft support to resolve the configuration issue.

• Refer to the Auth0 Troubleshooting documentation for Azure AD (Entra ID) for additional details regarding a misconfigured Client Secret.
• Contact Microsoft support for issues related to Azure AD (Entra ID) configuration.