az login Dogfood not working: interaction_required: AADSTS5000224: We are sorry, this resource is not available.

[YunchuWang]

Describe the bug

Authentication failed
interaction_required: AADSTS5000224: We are sorry, this resource is not available. If you are seeing this message by mistake, please contact Microsoft support. Trace ID: 6a48938d-ff08-422a-8131-93331eab1b00 Correlation ID: f43423b6-e87b-4b3f-bda9-f3e740258cf7 Timestamp: 2024-06-03 17:30:37Z. ($error_uri)

You can log an issue at Azure CLI GitHub Repository and we will assist you in resolving it.

Cant log in my df account:
admin@aad215.ccsctp.net today, used to work

Related command

az login

Errors

Authentication failed
interaction_required: AADSTS5000224: We are sorry, this resource is not available. If you are seeing this message by mistake, please contact Microsoft support. Trace ID: 6a48938d-ff08-422a-8131-93331eab1b00 Correlation ID: f43423b6-e87b-4b3f-bda9-f3e740258cf7 Timestamp: 2024-06-03 17:30:37Z. ($error_uri)

Issue script & Debug output

Authentication failed
interaction_required: AADSTS5000224: We are sorry, this resource is not available. If you are seeing this message by mistake, please contact Microsoft support. Trace ID: 6a48938d-ff08-422a-8131-93331eab1b00 Correlation ID: f43423b6-e87b-4b3f-bda9-f3e740258cf7 Timestamp: 2024-06-03 17:30:37Z. ($error_uri)

Expected behavior

should log in

Environment Summary

PS C:\Users\wangbill> az --version
azure-cli 2.43.0 *

core 2.43.0 *
telemetry 1.0.8 *

Extensions:
account 0.2.5
azure-devops 0.23.0
containerapp 0.3.4

Dependencies:
msal 1.20.0
azure-mgmt-resource 21.1.0b1

Python location 'C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe'
Extensions directory 'C:\Users\wangbill.azure\cliextensions'

Python (Windows) 3.10.8 (tags/v3.10.8:aaaf517, Oct 11 2022, 16:37:59) [MSC v.1933 32 bit (Intel)]

Legal docs and information: aka.ms/AzureCliLegal

You have 3 update(s) available. Consider updating your CLI installation with 'az upgrade'

Additional context

No response

[azure-client-tools-bot-prd]

Hi @YunchuWang,

2.43.0 is not the latest Azure CLI(2.61.0).

If you haven't already attempted to do so, please upgrade to the latest Azure CLI version by following https://learn.microsoft.com/en-us/cli/azure/update-azure-cli.

[yonzhan]

Thank you for opening this issue, we will look into it.

[jiasli]

I followed the below steps:

1. https://armwiki.azurewebsites.net/rp_onboarding/testing/dogfood.html#azcli
2. az config set core.enable_broker_on_windows=false (https://learn.microsoft.com/en-us/cli/azure/authenticate-azure-cli-interactively#sign-in-with-web-account-manager-wam-on-windows)
3. az login --allow-no-subscriptions

Reproduced the error:

interaction_required: AADSTS5000224: We are sorry, this resource is not available. If you are seeing this message by mistake, please contact Microsoft support. Trace ID: 71e1bec2-11e5-4086-9203-01e49b861500 Correlation ID: fd9c22a9-f49f-4245-807b-3ff0d5aecb44 Timestamp: 2025-01-07 08:10:38Z. ($error_uri)

As shown in the login URL https://login.windows-ppe.net/organizations/oauth2/v2.0/authorize, Azure CLI by default logs into /organizations tenant.

Could you try running az login with --tenant {tenant_id} and see if it still fails?