Unresponsive commands and inability to sign back in

[ScriptedFluff]

Describe the bug

On a fresh boot of Windows 11 the issue does not happen. After a couple of hours of the computer being on Az Login tries to sign in but gets to the "Retrieving tenants and subscriptions for the selection" and then appears to hang for about 5 - 10 minutes, after which I finally get a browser pop up asking me to select which account to sign in using. However clicking this seems to actually work, but the requesting process doesn't actually do anything at this point.

I've tried --debug on the end to see what is happening, but other than timeout / retries there appears to be nothing different.

I'm not the only one in the company I work for having this issue, but out of all of the developers (ones who use Az), only 1 other person has the issue.

Rebooting the machine results in about 2 hours of being able to sign in and out, but after that time period the issue happens again without fail.

I had this issue about 2 weeks ago and doing az upgrade + az account clear fixed the issue. However after about a week it started to happen again and I noticed another minor version upgrade was available again. This time az upgrade + az account wasn't enough to fix it.

To try and give you the version I'm currently on I did "az --version", but that took about 3 minutes to respond (it did eventually respond).

Also the line it appears to be "stuck" on is "urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443".

Related command

az login

Errors

No errors, just retries due to timing out (the user selection screen doesn't appear for about 5 mintues)

Issue script & Debug output

cli.knack.cli: Command arguments: ['login', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
Enable VT mode.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x000002B81E8FF240>, <function OutputProducer.on_global_arguments at 0x000002B81EC9C0E0>, <function CLIQuery.on_global_arguments at 0x000002B81ECC14E0>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'login': ['azure.cli.command_modules.profile']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: profile 0.005 2 8
cli.azure.cli.core: Total (1) 0.005 2 8
cli.azure.cli.core: Loaded 2 groups, 8 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : login
cli.azure.cli.core: Command table: login
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x000002B820F4B2E0>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\GarryFlanagan.azure\commands\2025-04-02.08-22-44.login.1620.log'.
az_command_data_logger: command args: login --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x000002B820F73BA0>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x000002B820FA23E0>, <function register_cache_arguments..add_cache_arguments at 0x000002B820FA2520>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x000002B820FA25C0>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x000002B81EC9C180>, <function CLIQuery.handle_query_parameter at 0x000002B81ECC1580>, <function register_ids_argument..parse_ids_arguments at 0x000002B820FA2480>]
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\Users\GarryFlanagan\.azure\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users\GarryFlanagan.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/organizations
msal.authority: openid_config("https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/organizations/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/{tenantid}/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/organizations/kerberos', 'tenant_region_scope': None, 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? True
msal.application: Falls back to broker._signin_interactively()
cli.azure.cli.core.auth.identity: Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136
msal.broker: [MSAL:0001] WARNING SetAuthorityUri:78 Initializing authority from URI 'https://login.microsoftonline.com/organizations' without authority type, defaulting to MsSts
msal.broker: [MSAL:0002] INFO SetCorrelationId:258 Set correlation ID: 08e7c84f-4225-4e57-9bcb-6f0dea00e442
msal.broker: [MSAL:0002] INFO ExecuteInteractiveRequest:1159 The original authority is 'https://login.microsoftonline.com/organizations'
msal.broker: [MSAL:0002] WARNING TryNormalizeRealm:2420 No HomeAccountId provided to normalize the realm
msal.broker: [MSAL:0002] INFO ExecuteInteractiveRequest:1170 The normalized realm is ''
msal.broker: [MSAL:0002] INFO ModifyAndValidateAuthParameters:219 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
msal.broker: [MSAL:0002] INFO ModifyAndValidateAuthParameters:219 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
msal.broker: [MSAL:0002] INFO ModifyAndValidateAuthParameters:243 Authority Realm: organizations
msal.broker: [MSAL:0002] WARNING TryEnqueueMsaDeviceCredentialAcquisitionAndContinue:1052 MsaDeviceOperationProvider is not available. Not attempting to register the device.
msal.broker: [MSAL:0003] WARNING ReturnResponseDueToMissingParameter:693 Attempted to read cache with a non-normalized realm, access token and ID token reads will fail
msal.broker: [MSAL:0003] WARNING ReadAccountById:227 Account id is empty - account not found
msal.broker: [MSAL:0003] INFO SetCanonicalRealm:1106 Normalize realm to: 'cd903f6e-5bda-4a58-adfb-8abc84c2e986'
msal.broker: [MSAL:0003] INFO LogTelemetryData:422 Printing Telemetry for Correlation ID: 08e7c84f-4225-4e57-9bcb-6f0dea00e442
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: start_time, Value: 2025-04-02T07:22:45.000Z
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: api_name, Value: SignInInteractively
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: was_request_throttled, Value: false
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: authority_type, Value: AAD
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: access_token_expiry_time, Value: 2025-04-02T08:05:25.000Z
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: msal_version, Value: 1.1.0+local
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: client_id, Value: 04b07795-8ddb-461a-bbee-02f9e1bf7b46
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: correlation_id, Value: 08e7c84f-4225-4e57-9bcb-6f0dea00e442
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: broker_app_used, Value: true
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: stop_time, Value: 2025-04-02T07:22:47.000Z
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: msalruntime_version, Value: 0.16.2
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: original_authority, Value: https://login.microsoftonline.com/organizations
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: request_eligible_for_broker, Value: true
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: additional_query_parameters_count, Value: 2
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: read_token_last_error, Value: missing required parameter
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: auth_flow, Value: Broker
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: ui_event_count, Value: 1
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,0,0,3320122.1551,","ui_visible":false,"tenant_id":"cd903f6e-5bda-4a58-adfb-8abc84c2e986","scope":"https://management.core.windows.net//.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/04b07795-8ddb-461a-bbee-02f9e1bf7b46","provider_id":"https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose; charset=utf-8","http_content_size":14072,"device_join":"aadj","correlation_id":"{931cf314-566b-4b3c-9fe3-bbe0ef150914}","client_id":"04b07795-8ddb-461a-bbee-02f9e1bf7b46","ccs_failover_v2":"1.P","cache_event_count":0,"broker_version":"10.0.26100.3323","authority":"https://login.microsoftonline.com/organizations","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"primary","account_id":"4d01d1ec-9be8-4397-9601-1ae0f4588d74","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_mats":{"x_ms_clitelem":"1,0,0,3320122.1551,","ui_visible":false,"tenant_id":"cd903f6e-5bda-4a58-adfb-8abc84c2e986","scope":"https://management.core.windows.net//.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/04b07795-8ddb-461a-bbee-02f9e1bf7b46","provider_id":"https://login.windows.net","http_status":200,"http_event_count":1,"http_content_type":"application/jose; charset=utf-8","http_content_size":14072,"device_join":"aadj","correlation_id":"{931cf314-566b-4b3c-9fe3-bbe0ef150914}","client_id":"04b07795-8ddb-461a-bbee-02f9e1bf7b46","ccs_failover_v2":"1.P","cache_event_count":0,"broker_version":"10.0.26100.3323","authority":"https://login.microsoftonline.com/organizations","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"primary","account_id":"4d01d1ec-9be8-4397-9601-1ae0f4588d74"},"silent_status":0,"is_cached":1}
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: tenant_id, Value: cd903f6e-5bda-4a58-adfb-8abc84c2e986
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: normalized_realm, Value: cd903f6e-5bda-4a58-adfb-8abc84c2e986
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: write_token, Value: AT|ID
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: storage_write, Value: DAT|DID|DAC
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: storage_read, Value: DAC
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: is_successful, Value: true
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: authorization_type, Value: Interactive
msal.broker: [MSAL:0003] INFO LogTelemetryData:430 Key: request_duration, Value: 2719
msal.broker: [MSAL:0003] INFO LogTelemetryData:435 Printing Execution Flow:
msal.broker: [MSAL:0003] INFO LogTelemetryData:443 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"4s7ub","tid":2,"ts":1,"l":2},{"t":"4sufd","tid":2,"ts":1,"s":2,"l":2},{"t":"4swgg","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgf","tid":2,"ts":1,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":1,"s":1,"l":2},{"t":"8dqim","tid":3,"ts":1,"l":2},{"t":"8dqkl","tid":3,"ts":1,"l":2,"a":9,"ie":0},{"t":"54uxe","tid":2,"ts":1,"l":2},{"t":"4wqm9","tid":4,"ts":2651,"l":2},{"t":"4o9ak","tid":4,"ts":2651,"l":2},{"t":"4o9ai","tid":4,"ts":2654,"l":2},{"t":"8dql1","tid":4,"ts":2674,"l":2},{"t":"4qopb","tid":4,"ts":2674,"l":2},{"t":"8dqkn","tid":4,"ts":2674,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":4,"ts":2675,"l":2,"a":9,"ie":1},{"t":"8dqkr","tid":4,"ts":2675,"l":2},{"t":"4sufd","tid":4,"ts":2675,"s":2,"l":2},{"t":"4swgg","tid":4,"ts":2675,"s":2,"l":2},{"t":"4swgf","tid":4,"ts":2675,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":2675,"s":2,"l":2},{"t":"8b2yn","tid":3,"ts":2675,"l":2},{"t":"8dqlh","tid":3,"ts":2675,"l":2},{"t":"8dqli","tid":3,"ts":2675,"l":2},{"t":"8dqln","tid":3,"ts":2675,"l":2},{"t":"8dqih","tid":3,"ts":2675,"l":2},{"t":"4qnnm","tid":3,"ts":2675,"l":2,"a":3,"ie":0},{"t":"4qnnl","tid":3,"ts":2680,"l":2,"a":3,"ie":1},{"t":"4qnng","tid":3,"ts":2680,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":2690,"l":2,"a":2,"ie":1},{"t":"4qnne","tid":3,"ts":2690,"l":2,"a":3,"ie":0},{"t":"4qnnd","tid":3,"ts":2692,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":3,"ts":2704,"l":2},{"t":"4waym","tid":3,"ts":2704,"l":2},{"t":"4pqvy","tid":3,"ts":2716,"l":2},{"t":"4pqvy","tid":3,"ts":2716,"l":2},{"t":"4pqvy","tid":3,"ts":2716,"l":2},{"t":"4pqvy","tid":3,"ts":2716,"l":2}
msal.token_cache: event={
"_account_id": "4d01d1ec-9be8-4397-9601-1ae0f4588d74",
"client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
"data": {},
"environment": "login.microsoftonline.com",
"grant_type": "broker",
"response": {
"_account_id": "4d01d1ec-9be8-4397-9601-1ae0f4588d74",
"_msalruntime_telemetry": {
"DATA LIMITED": "Full MSALRuntime telemetry not yet implemented",
"api_name": "SignInInteractively",
"broker_app_used": "true",
"client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
"correlation_id": "08e7c84f-4225-4e57-9bcb-6f0dea00e442",
"is_successful": "true",
"msal_version": "1.1.0+local",
"msalruntime_version": "0.16.2"
},
"access_token": "",
"client_info": "eyJ1aWQiOiI0ZDAxZDFlYy05YmU4LTQzOTctOTYwMS0xYWUwZjQ1ODhkNzQiLCJ1dGlkIjoiY2Q5MDNmNmUtNWJkYS00YTU4LWFkZmItOGFiYzg0YzJlOTg2IiwicHJlZmVycmVkX3VzZXJuYW1lIjoiZ2FycnkuZmxhbmFnYW5AY2xldmVyYWR2aXNlci5jb20ifQ",
"expires_in": 2558,
"id_token": "",
"id_token_claims": "********",
"scope": "https://management.core.windows.net//user_impersonation https://management.core.windows.net//.default",
"token_type": "bearer"
},
"scope": [
"https://management.core.windows.net//user_impersonation",
"https://management.core.windows.net//.default"
],
"token_endpoint": "https://login.microsoftonline.com/organizations/oauth2/v2.0/token"
}

Retrieving tenants and subscriptions for the selection...
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/organizations
msal.authority: openid_config("https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/organizations/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/{tenantid}/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/organizations/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/organizations/kerberos', 'tenant_region_scope': None, 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 655b70b3-3620-41c7-989d-13a4440fadd0
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/tenants?api-version=2022-12-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '455a5a07-0f93-11f0-8bf3-c475ab7e13ab'
cli.azure.cli.core.sdk.policies: 'CommandName': 'login'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /tenants?api-version=2022-12-01 HTTP/1.1" 200 1312
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '1312'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-tenant-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '80cd5993-a3c2-400e-9a99-b16c87e6892c'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '80cd5993-a3c2-400e-9a99-b16c87e6892c'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'UKWEST:20250402T072307Z:80cd5993-a3c2-400e-9a99-b16c87e6892c'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: DDD06E63ADE94390B702D325BECC6B74 Ref B: AMS231032607023 Ref C: 2025-04-02T07:23:07Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Wed, 02 Apr 2025 07:23:07 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"value":[{"id":"/tenants/cd903f6e-5bda-4a58-adfb-8abc84c2e986","tenantId":"cd903f6e-5bda-4a58-adfb-8abc84c2e986","countryCode":"GB","displayName":"CLEVER ADVISER TECHNOLOGY LIMITED","domains":["mail.cleveradviser.com","testemail.cleveradviser.com","cleverfunds.com","cleveradviser.com","CleverAdviser.onmicrosoft.com","clevermailing.co.uk","CleverAdviser.mail.onmicrosoft.com","cleveradviser.co.uk","clevermps.com","clevermps.co.uk","cleverim.co.uk","cleverconnects.co.uk"],"tenantCategory":"Home","defaultDomain":"cleveradviser.com","tenantType":"AAD","tenantBrandingLogoUrl":"https://aadcdn.msftauthimages.net/c1c6b6c8-82pszla7ymqu-rjzvwe3bbzqcjfkwyxivks2n5adus/logintenantbranding/0/bannerlogo?ts=636965536341976856"},{"id":"/tenants/5f08c7d4-5e2b-4daf-9707-d986776a53aa","tenantId":"5f08c7d4-5e2b-4daf-9707-d986776a53aa","countryCode":"GB","displayName":"devtest","domains":["cleverdevtest.onmicrosoft.com"],"tenantCategory":"Home","defaultDomain":"cleverdevtest.onmicrosoft.com","tenantType":"AAD"},{"id":"/tenants/d16ce90e-6e4f-4659-abf3-73a31dca6625","tenantId":"d16ce90e-6e4f-4659-abf3-73a31dca6625","countryCode":"GB","displayName":"Clever Users","domains":["cleverusers.com","cleverusers.onmicrosoft.com"],"tenantCategory":"Home","defaultDomain":"cleverusers.onmicrosoft.com","tenantType":"AAD B2C"}]}
cli.azure.cli.core._profile: Finding subscriptions under tenant cd903f6e-5bda-4a58-adfb-8abc84c2e986 'CLEVER ADVISER TECHNOLOGY LIMITED'
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986
msal.authority: openid_config("https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/cd903f6e-5bda-4a58-adfb-8abc84c2e986/kerberos', 'tenant_region_scope': 'EU', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 2aac9948-52a3-4b51-bf6b-c5c897caed5e
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions?api-version=2022-12-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '455a5a07-0f93-11f0-8bf3-c475ab7e13ab'
cli.azure.cli.core.sdk.policies: 'CommandName': 'login'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443

Expected behavior

Expect to be able to sign in within a minute

Environment Summary

azure-cli 2.71.0

core 2.71.0
telemetry 1.1.0

Dependencies:
msal 1.31.2b1
azure-mgmt-resource 23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users{Username}.azure'
Extensions directory 'C:\Users{Username}.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec 3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[ScriptedFluff]

Has there been any progression on this issue? I'm completely out of ideas and people to bug about this, so my next resolution was going to be a system wipe. As this started about 2 weeks ago after a very big windows update (Windows 11, version 24H2 on 16th March 2025)... so thinking it could be a configuration issue from the update.