Issues with authentication

[JayBeavers]

This issue is for a: (mark with an x)

- [ ] bug report -> please search issues before submitting
- [ ] feature request
- [x] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

1. Follow directions to install iwa-console app into AD for tenant microsoft.onmicrosoft.com
2. Run the VS sample app, see 'user has not consented to use application with ID ...'
3. Manually paste into browser, https://login.microsoftonline.com/common/Consent/Set?client-request-id=..., substituting in appropriate application-id.

Any log messages given by the failure

Note: It looks like MSGraph user.read.all is not allowed without approval on tenant. PS script to create app didn't seem like it registered correctly, I manually added MSGraph permissions after the script created the app. I also tried following the manual app creation steps, that didn't seem to include any redirect URLs in those instructions, so there was nowhere for the token auth flow to go...

Request Id: 7d3a0df3-d8d9-4185-bdb6-e8cfcca01500
Correlation Id: e20f1239-9fba-4b66-b78e-4193217deae9
Timestamp: 2022-05-26T17:11:53Z
Message: AADSTS500119: Redirect URIs with urn: schemes are prohibited. Use a different scheme, or https://login.microsoftonline.com/common/oauth2/nativeclient

Expected/desired behavior

Authenticated!

OS and Version?

Win 11 Enterprise managed by microsoft.onmicrosoft.com tenant.

Versions

Mention any other details that might be useful

Contact info: jay.beavers@microsoft.com

---

Thanks! We'll be in touch soon.

[kalyankrishna1]

use aka.ms/adminconsent to obtain consent for your app