The Known Issues of Az.Accounts 3.0.0 and Their Workarounds

[msJinLei]

1. The interactive login method cannot popup window for WAM (Fixed)

Report an error "User canceled authentication" Refer to AzureAD/microsoft-authentication-library-for-python#707

• Fixed in Az.Accounts 3.0.1

2. Azure PowerShell cmdlets are unable to run after login with DeviceCode and DeviceCode login methods will fail without -Tenant parameter (Mitigated)

• Fixed in Az.Accounts 4.0.0

3. Azure PowerShell cmdlets are unable to run after login with UserName+Password and UserName+Password login methods will fail without -Tenant parameter (Mitigated)

• Workaround of Az.Accounts 3.0.0
  • Login interactively with the same account on the same machine
  • If 1 is not applicable, disable WAM

Update-AzConfig -EnableLoginByWam $false

• Mitigated in Az.Accounts 3.0.1

4. WAM pop-up window to select an account is not easy to find

• Workaround: minimize other windows to look for the pop-up window carefully

Root case

Fail to get the right console handle. See AzureAD/microsoft-authentication-library-for-dotnet#4887

5 WAM pop-up window doesn't display "Work and school account" option

• Fixed in Az.Accounts 4.0.0

6. The interactive login method cannot popup window for WAM in Window PowerShell ISE Console

• Workaround

Update-AzConfig -EnableLoginByWam $false

Note

Reported to MSAL team, see AzureAD/microsoft-authentication-library-for-dotnet#4796

7. The ExportAzSshConfig and EnterAzVMCommand from Az.Ssh are not able to use when WAM is enabled.

• Fixed in Az.Accounts 4.0.0

[slavizh]

What about #25003?

[weyCC81]

In ISE, on Windows 11 mine says the following, does this correlate?

# 12.0.0    Az
# 3.0.0     Az.Accounts
# 6.0.0     Az.KeyVault
Connect-AzAccount -Tenantid [TenantID] -Subscription [Subscription]
# > Connect-AzAccount : InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles 
# > Could not find tenant id for provided tenant domain '[TenantID]'. Please ensure that the provided user is found in the provided tenant domain.

[msJinLei]

What about #25003?

Thanks for reporting the issue. I reply in it.

[msJinLei]

In ISE, on Windows 11 mine says the following, does this correlate?

# 12.0.0    Az
# 3.0.0     Az.Accounts
# 6.0.0     Az.KeyVault
Connect-AzAccount -Tenantid [TenantID] -Subscription [Subscription]
# > Connect-AzAccount : InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles 
# > Could not find tenant id for provided tenant domain '[TenantID]'. Please ensure that the provided user is found in the provided tenant domain.

@weyCC81 Thanks for reporting the issue. I shall say yes

Please disable WAM to workaround it firstly

Update-AzConfig -EnableLoginByWam $false