CODEWITHSUNDEEP
azure-active-directory
Venkata V
Venkata V

Reputation: 51

AADSTS70002: Error validating credentials. AADSTS50012: Invalid client secret is provided

When I am trying to create an authentication header using the below code. I am getting an error saying "AADSTS70002: Error validating credentials. AADSTS50012: Invalid client secret is provided." Now, I am sure, that the secret which I used in the code is not matching with the one used in my AAD app registration. Can anybody help me on how to get the client secret, from my app registrations or how to add a new application identifier in my O365 account directory. 

private string GetAuthenticationHeader(AuthenticationInformation authenticationInformation){
    try{
        return RetryHelper.InvokeWithRetries(() =>
        {
            var clientCredential = new ClientCredential(authenticationInformation.ClientId, authenticationInformation.AppSecret);
            var ac = new AuthenticationContext(authenticationInformation.Authority);
            AuthenticationResult ar = ac.AcquireToken(authenticationInformation.Resource, clientCredential);
            return ar.CreateAuthorizationHeader();
        });
    }
    catch (Exception ex){
        return ex.Message;
    }
}

Upvotes: 5

Views: 11156

Answers (2)

Ravi Anand
Ravi Anand

Reputation: 5534

I was getting this error while trying to get the graph token via fiddler. this was because my secret key had few unnecessary characters like + and /.

secret key must be encoded before making request.

I replaced + by %2B and my fiddler request in my secret key and it worked like a charm.

Invalid client secret error on Azure App Service

Upvotes: 0

Nan Yu
Nan Yu

Reputation: 27588

To add a secret key for your web application's credentials, click the "Keys" section from the Settings blade of your Azure AD App in Azure Portal :

  • Add a description for your key and select either a 1 or 2 or year duration(or never expires).
  • The right-most column will contain the key value, after you save the configuration changes. Be sure to come back to this section and copy it after you hit save, so you will have it for use in your client application during authentication at run-time.

Please click here for more details about how to register and update your application with your Azure Active Directory tenant .

Upvotes: 5

Related Questions