Export AADConditonalAccessPolicy Failing - Microsoft.Graph.PowerShell.AuthenticationException: Authentication needed. Please call Connect-MgGraph.

[mTooki]

Description of the issue

I'm having an issue when exporting AADConditionalAccessPolicy using credentials. The error file i get is below.

I’ve reinstalled and updated the module along with all dependencies, ensuring that any older or conflicting versions were completely removed. I’ve tested the process in PowerShell ISE, the standard terminal, and VS Code, and also tried connecting to Microsoft Graph before running the export. Despite these steps, the same error continues to occur.

=================================================================

Microsoft 365 DSC Version

1.25.1015.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

# Generated with Microsoft365DSC version 1.25.1015.1
# For additional information on how to use Microsoft365DSC, please visit https://aka.ms/M365DSC
param (
    [parameter()]
    [System.Management.Automation.PSCredential]
    $Credential
)

Configuration M365TenantConfig
{
    param (
        [parameter()]
        [System.Management.Automation.PSCredential]
        $Credential
    )

    if ($null -eq $Credential)
    {
        <# Credentials #>
        $Credscredential = Get-Credential -Message "Credentials"

    }
    else
    {
        $CredsCredential = $Credential
    }

    $OrganizationName = $CredsCredential.UserName.Split('@')[1]

    Import-DscResource -ModuleName 'Microsoft365DSC' -ModuleVersion '1.25.1015.1'

    Node localhost
    {
    }
}

M365TenantConfig -ConfigurationData .\ConfigurationData.psd1 -Credential $Credential

Verbose logs showing the problem

Error:
[2025/10/21 09:02:02]
{NotSpecified}
Microsoft.Graph.PowerShell.AuthenticationException: Authentication needed. Please call Connect-MgGraph.
   at Microsoft.Graph.PowerShell.Authentication.Core.Utilities.AuthenticationHelpers.<GetAuthenticationProviderAsync>d__10.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Graph.PowerShell.Authentication.Helpers.HttpHelpers.GetGraphHttpClient()
   at Microsoft.Graph.Beta.PowerShell.Module.BeforeCreatePipeline(InvocationInfo invocationInfo, HttpPipeline& pipeline)
   at Microsoft.Graph.Beta.PowerShell.Module.CreatePipeline(InvocationInfo invocationInfo, String parameterSetName)
   at Microsoft.Graph.Beta.PowerShell.Cmdlets.GetMgBetaIdentityConditionalAccessPolicy_List.<ProcessRecordAsync>d__88.MoveNext()
"Error during Export:"
at Get-MgBetaIdentityConditionalAccessPolicy<Process>, C:\Program Files\WindowsPowerShell\Modules\Microsoft.Graph.Beta.Identity.SignIns\2.28.0\exports\ProxyCmdletDefinitions.ps1: line 20382
at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1015.1\DSCResources\MSFT_AADConditionalAccessPolicy\MSFT_AADConditionalAccessPolicy.psm1: line 2346
at <ScriptBlock>, <No file>: line 99
at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1015.1\Modules\M365DSCReverse.psm1: line 789
at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1015.1\Modules\M365DSCUtil.psm1: line 1771
at <ScriptBlock>, <No file>: line 4
svcmig365@domain.onmicrosoft.com
TenantId: domain.onmicrosoft.com

Environment Information + PowerShell Version

$PSVersionTable


OsName               : Microsoft Windows 11 Pro
OsOperatingSystemSKU : 48
OsArchitecture       : 64-bit
WindowsVersion       : 2009
WindowsBuildLabEx    : 26100.1.amd64fre.ge_release.240331-1435
OsLanguage           : en-US
OsMuiLanguages       : {en-US}

Key   : PSVersion
Value : 5.1.26100.6899
Name  : PSVersion

Key   : PSEdition
Value : Desktop
Name  : PSEdition

Key   : PSCompatibleVersions
Value : {1.0, 2.0, 3.0, 4.0...}
Name  : PSCompatibleVersions

Key   : BuildVersion
Value : 10.0.26100.6899
Name  : BuildVersion

Key   : CLRVersion
Value : 4.0.30319.42000
Name  : CLRVersion

Key   : WSManStackVersion
Value : 3.0
Name  : WSManStackVersion

Key   : PSRemotingProtocolVersion
Value : 2.3
Name  : PSRemotingProtocolVersion

Key   : SerializationVersion
Value : 1.1.0.1
Name  : SerializationVersion

[FabienTschanz]

This will be solved when version 1.25.1022.1 is released. There is currently an issue when using credentials. You can switch to certificate or client secrets for the moment if you like to, or wait until the next version releases in the next few days.

[mTooki]

Somewhat relieved it wasn't something I was doing. Apologies if I missed this as a known issue. Look forward to the update!

[FabienTschanz]

No apology needed, there isn't an official list of open bugs outside of the issues. But that's a good idea. Can't promise when the next update is going to be released, but I hope it's very soon! Have to wait on some other people for feedback.