Score:0

Unable to sign in to Microsoft Learn

mz flag

As of around February 2023, only when our forward web proxy solution is enabled, signing in to a Microsoft Account (personal / consumer) works fine in general (e.g., at https://login.live.com/) except for Microsoft Learn and Enterprise Skills Initiative (ESI) which doesn't recognise that the account is signed in, and attempting to sign in on the page seems to go through and work but actually doesn't, and the following error message is logged somewhere in the background:

{"error":"invalid_grant","error_description":"AADSTS500021: Access to 'Microsoft Accounts' tenant is denied.

Score:0
mz flag

We:

  1. Assumed that Microsoft had changed their authentication mechanism. Although, we found no documentation for this.
  2. Guessed from the error message that their dedicated 365 tenant for this was MicrosoftAccounts.onmicrosoft.com and confirmed it by checking https://login.microsoftonline.com/MicrosoftAccounts.onmicrosoft.com/v2.0/.well-known/openid-configuration (if it didn't exist, the content would start with {"error":"invalid_tenant").
  3. Added this to our 365 tenant restrictions' allowlist.

This resolved the problem.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.