Why can I not open a support ticket? Having issue with the external AD authentication.

Question

Why can I not open a support ticket? Having issue with the external AD authentication.

Prabhat Vaish 0

The Azure portal does not let us create a support ticket, even though we have a subscription to the support plan and pay for it every month.

Having an issue with authenticating a B2B user with external AD, when trying to connect to an Android device.

Please see the details of the error captured in Entra signin log. The user is then asked to login again .. in an infinite loop.

Date

3/11/2025, 4:26:07 PM

Request ID

d98e8efc-4f7a-491c-b0c7-4a4deaef4800

Correlation ID

fa34d8e7-2384-4a89-b917-e2ef60d78992

Authentication requirement

Single-factor authentication

Status

Failure

Continuous access evaluation

No

Sign-in error code

50199

Failure reason

For security reasons, user confirmation is required for this request. Please repeat the request allowing user interaction.

Andreas Baumgarten 118.9K Reputation points MVP

2025-03-07T19:38:20.4933333+00:00

Hi @Prabhat Vaish ,

could you please give some more details what do you mean with "The Azure portal does not let us create a support ticket"?

Do you get an error message? Or any additional information might be helpful.

What kind of Azure support plan do you have?

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

1 answer

Your answer

Andreas Baumgarten 118.9K Reputation points MVP

2025-03-07T19:38:20.4933333+00:00

Hi @Prabhat Vaish ,

could you please give some more details what do you mean with "The Azure portal does not let us create a support ticket"?

Do you get an error message? Or any additional information might be helpful.

What kind of Azure support plan do you have?

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

Answer 1

KarishmaTiwari-MSFT 20,582 Microsoft Employee

@Prabhat Vaish For our customers with Developer support plan we have introduced a new experience where you get business hours access to Support Engineers on Microsoft Q&A for prioritized responses, as the first line of support.

Additionally, if you have issues pertaining to Azure billing or subscription management, you can always create a support request though the Azure Portal or by following this link.

We would be more than happy to assist you with any technical questions you have here on Q&A. Any time you post a new thread; you will receive a response within 8 business hours (see here for more details on the SLA and subscription benefits).

https://learn.microsoft.com/en-us/answers/support/qna-faq#priority-community-support--pcs

Prabhat Vaish 0 Reputation points

2025-03-11T16:23:32.4433333+00:00

The ticket is updated to indicate the exact problem. What are the next steps?
Sanoop M 1,320 Reputation points Microsoft External Staff

2025-03-11T20:51:36.5833333+00:00
Hello Prabhat Vaish,

I understand that you are having an issue with authenticating a B2B user with external ID, when trying to connect to an Android device.

1.Could you please provide us the Error message Screenshot when the B2B user is trying to authenticate with External ID, when trying to connect to an Android device.

2.Could you please confirm whether your tenant is configured as a Workforce tenant or External tenant.

3.Could you please confirm if this issue is happening only for one B2B user or all the B2B users in your tenant.

4.Could you please check how the below mentioned B2B Collaboration settings are configured in your Microsoft Entra tenant.

Sign in to the Microsoft Entra admin center as at least a Security Administrator.

Browse to Identity > External Identities > Cross-tenant access settings, then select Organizational settings

Select the link in the Inbound access column and the B2B collaboration tab.

Select External users and groups.

Please check the Access status.

Allow access: Allows the users and groups specified under Applies to to be invited for B2B collaboration.

Block access: Blocks the users and groups specified under Applies to from being invited to B2B collaboration.

Please refer to the below Screenshot for your reference.

For more additional details, please refer to the below Screenshot for your reference.

Cross-tenant access settings - Microsoft Entra External ID | Microsoft Learn
Prabhat Vaish 0 Reputation points

2025-03-11T21:30:00.02+00:00
There is no error message on the user device.

This has nothing to do with our tenant. This is happening when the primary authority for a user is external AD. Happens for every such case.

Is this only applicable for Android? Same user can login using web browser or from iOS device.

Is there a better way to get this routed to right group?
Sanoop M 1,320 Reputation points Microsoft External Staff

2025-03-12T00:38:00.73+00:00

Hello Prabhat Vaish,

Thank you for your response.

Could you please update on accessing which application the affected users are seeing the Error Code: 50199, Failure reason: For security reasons, user confirmation is required for this request. Please repeat the request allowing user interaction.

Interrupt is shown for all scheme redirects in mobile browsers. No action required. The user was asked to confirm that this app is the application they intended to sign into. This is a security feature that helps prevent spoofing attacks. This occurs because a system webview has been used to request a token for a native application. To avoid this prompt, the redirect URI should be part of the following safe list:

http://

https://

chrome-extension:// (desktop Chrome browser only)

Do not use the System Webview. Instead use the system browser or embedded webview.

Enable WithUseEmbeddedWebView

For example, when using MSAL.net for Xamarin, try adding ".WithUseEmbeddedWebView(true)". This will force using a embedded webview.

result = await authContext.AcquireTokenInteractive(Scopes)

                .WithAuthority(Authority)

           --> .WithUseEmbeddedWebView(true) <--

                .WithParentActivityOrWindow(pwindow)

                .ExecuteAsync();

For more information related to this Error Code:50199, please refer to the below documents for your reference.

https://stackoverflow.com/questions/69381228/msal-android-xamarin-stuck-dialog-are-you-trying-to-sign-in-to-your-appname

How to enable cross-app SSO on Android using MSAL - Microsoft identity platform | Microsoft Learn

Please let us know if you have any queries.
Prabhat Vaish 0 Reputation points

2025-03-12T00:58:52.67+00:00

Our application is called fieldworker, which is obviously hosted on the Azure. The reson for initiating this contact .. is precisely that the end-user never sees this confirmation window.

This email is precisely why this mode of interaction is so much wastage of time .. for a development partner. This is literally bordering on moving our app and business to another cloud provider.

Rest assured, any developer worth his/her salt .. would have already looked at all these articles and exhausted most such avenues before trying to open a ticket for support.

Not sure if this going to be escalated up ..

TLDR - This model for interacting with your development partners is wasting time, insulting to the partners and does nothing but simpluy waste time. If you trust your models, why would you not think that others have already seen the same canned responses.

Share via

Why can I not open a support ticket? Having issue with the external AD authentication.

1 answer

Your answer