获取 Dynamics 365 的身份验证令牌时出现错误 AADSTS90002

Question

尝试从我的 .Net 客户端使用 Dynamics 365 进行身份验证时遇到以下错误：

AADSTS90002: Tenant authorize not found. This may happen if there are no active subscriptions for the tenant. Check with your subscription administrator.

这是我目前使用的代码：

AuthenticationParameters authenticationParameters = AuthenticationParameters.CreateFromResourceUrlAsync(new Uri("https://dev-aec-ssp.api.crm6.dynamics.com/api/data/v9.1/")).Result;
AuthenticationContext authenticationContext = new AuthenticationContext(authenticationParameters.Authority, false);
ClientCredential clientCredential = new ClientCredential("9cd8fe45-xxxx-xxxx-xxxx-e43ef81c803f", "abcdefghijk");
AuthenticationResult authenticationResult = null;
try
{
    authenticationResult = authenticationContext.AcquireTokenAsync("https://dev-aec-ssp.api.crm6.dynamics.com", clientCredential).Result;
}
catch (Exception ex)
{
    throw new Exception("Failed to authenticate with remote Dynamics service.", ex);
}

AcquireTokenAsync 总是失败。

Answer 1

几个点：

1. 组织 URL 应类似于 https://yourcrm.dynamics.com。 Read more

2. GitHub issue 说：

https://login.microsoftonline.com/{Guid}（其中 Guid 是租户 ID
或
https://login.microsoftonline.com/domainName，其中域名是与您的租户关联的域
或
https://login.microsoftonline.com/common

    string organizationUrl = "https://yourcrm.dynamics.com";
    string appKey = "*****";
    string aadInstance = "https://login.microsoftonline.com/";
    string tenantID = "myTenant.onmicrosoft.com";
    string clientId = "UserGUID****";
    public Task<String> SendData()
    {
        return AuthenticateWithCRM();
    }

    public async Task<String> AuthenticateWithCRM()
    {
        ClientCredential clientcred = new ClientCredential(clientId, appKey);
        AuthenticationContext authenticationContext = new AuthenticationContext(aadInstance + tenantID);
        AuthenticationResult authenticationResult = await authenticationContext.AcquireTokenAsync(organizationUrl, clientcred);
        using (HttpClient httpClient = new HttpClient())
            {
                httpClient.BaseAddress = new Uri(organizationUrl);

                .

                .
             }

    }