Using a server back-end web application ("Authroization Code" flow) to allow users to authenticate to my app using Azure/MS logins, I ran into an odd (and google-unhelpful) issue -

Following this guide (written only a few months ago) - https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code When I go to redirect the user to the login page (in this case on my browser, where I'm already logged into the MS online account, I get the following error:

AADSTS500201: We are unable to issue tokens from this API version for a Microsoft account. Please contact the application vendor as they need to use version 2.0 of the protocol to support this.

Googling the error number comes up with very few hits, and googling the error text gives me some hits about 'it's not ready yet' or changing account types, which I'm not entirely sure how to do on my account.

Is it an account issue, or am I redirecting to the wrong URL?


The link in the unattended access tutorial should be replaced by your own. To see the consent dialog:


{tenant} = A tenant created in your Azure account.

{appID} = An OAUTH application created in your account (substitute for the example link 6731de76-14a6-49ae-97bc-6eba6914391e)

{redirect-in-app} = for example, https://localhost/myapp/permissions created in your application.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.