MSALInternalError
Objective-C
enum MSALInternalError : NSInteger {}
Swift
enum MSALInternalError : Int, @unchecked Sendable
MSALInternalError enum contains all possible errors under MSALInternalErrorCodeKey. This enum exists only for the debugging and error information purposes, you should not try to recover from these errors in runtime.
-
A required parameter was not provided, or a passed in parameter was invalid. See MSALErrorDescriptionKey for more information.
Declaration
Objective-C
MSALInternalErrorInvalidParameter = -42000Swift
case internalErrorInvalidParameter = -42000 -
The required MSAL URL scheme is not registered in the app’s info.plist. The scheme should be “msauth.[my.app.bundleId]”
e.g. an app with the bundle Identifier “com.contoso.myapp” would need to register the scheme “msauth.com.contoso.myapp” and add the scheme into its Info.plist under CFBundleURLTypes - CFBundleURLSchemes key
Declaration
Objective-C
MSALInternalErrorRedirectSchemeNotRegistered = -42001Swift
case internalErrorRedirectSchemeNotRegistered = -42001 -
The provided redirect URI is invalid.
Valid formats include:
- Default MSAL format: “msauth.[my.app.bundleId]://auth”
- ADAL format: “
://[my.app.bundleId]”
Ensure the redirect URI matches one of the valid formats. e.g. an app with the bundle Id “com.contoso.myapp” would need redirect URI in the form: msauth.com.contoso.myapp://auth. See MSALErrorDescriptionKey for detailed error information.
Declaration
Objective-C
MSALInternalErrorInvalidRedirectURI = -42011Swift
case internalErrorInvalidRedirectURI = -42011 -
Protocol error, such as a missing required parameter.
Declaration
Objective-C
MSALInternalErrorInvalidRequest = -42002Swift
case internalErrorInvalidRequest = -42002 -
Client authentication failed. The client credentials aren’t valid. To fix, the application administrator updates the credentials.
Declaration
Objective-C
MSALInternalErrorInvalidClient = -42003Swift
case internalErrorInvalidClient = -42003 -
The provided grant is invalid or has expired. Try a new request to the /authorize endpoint.
Declaration
Objective-C
MSALInternalErrorInvalidGrant = -42004Swift
case internalErrorInvalidGrant = -42004 -
Invalid scope parameter.
Declaration
Objective-C
MSALInternalErrorInvalidScope = -42005Swift
case internalErrorInvalidScope = -42005 -
The client application isn’t permitted to request an authorization code. This error usually occurs when the client application isn’t registered in Azure AD or isn’t added to the user’s Azure AD tenant. The application can prompt the user with instruction for installing the application and adding it to Azure AD.
Declaration
Objective-C
MSALInternalErrorUnauthorizedClient = -42006Swift
case internalErrorUnauthorizedClient = -42006 -
The server returned an unexpected http response. For instance, this code is returned for 5xx server response when something has gone wrong on the server but the server could not be more specific on what the exact problem is.
Declaration
Objective-C
MSALInternalErrorUnhandledResponse = -42007Swift
case internalErrorUnhandledResponse = -42007 -
An unexpected error occured within the MSAL client.
Declaration
Objective-C
MSALInternalErrorUnexpected = -42008Swift
case internalErrorUnexpected = -42008 -
Un expected http response with status code 403 or 404
Declaration
Objective-C
MSALInternalErrorUnexpectedHttpResponse = -42009Swift
case internalErrorUnexpectedHttpResponse = -42009 -
The passed in authority URL does not pass validation. If you’re trying to use B2C, you must disable authority validation by setting validateAuthority of MSALPublicClientApplication to NO.
Declaration
Objective-C
MSALInternalErrorFailedAuthorityValidation = -42010Swift
case internalErrorFailedAuthorityValidation = -42010 -
The passed in authority URL does not pass validation. If you’re trying to use B2C, you must disable authority validation by setting validateAuthority of MSALPublicClientApplication to NO.
Declaration
Objective-C
MSALInternalErrorMismatchedUser = -42101Swift
case internalErrorMismatchedUser = -42101 -
Found multiple accounts in cache. Please use getAccounts: API which supports multiple accounts.
Declaration
Objective-C
MSALInternalErrorAmbiguousAccount = -42102Swift
case internalErrorAmbiguousAccount = -42102 -
The user or application failed to authenticate in the interactive flow. Inspect MSALOAuthErrorKey and MSALErrorDescriptionKey in the userInfo dictionary for more detailed information about the specific error.
Declaration
Objective-C
MSALInternalErrorAuthorizationFailed = -42104Swift
case internalErrorAuthorizationFailed = -42104 -
MSAL requires a non-nil account for the acquire token silent call
Declaration
Objective-C
MSALInternalErrorAccountRequired = -42106Swift
case internalErrorAccountRequired = -42106 -
The authentication request was cancelled programmatically.
Declaration
Objective-C
MSALInternalErrorSessionCanceled = -42401Swift
case internalErrorSessionCanceled = -42401 -
An interactive authentication session is already running with the web browser visible. Another authentication session can not be launched yet.
Declaration
Objective-C
MSALInternalErrorInteractiveSessionAlreadyRunning = -42402Swift
case internalErrorInteractiveSessionAlreadyRunning = -42402 -
MSAL could not find the current view controller in the view controller heirarchy to display the web browser on top of.
Declaration
Objective-C
MSALInternalErrorNoViewController = -42403Swift
case internalErrorNoViewController = -42403 -
MSAL tried to open a URL from an extension, which is not allowed.
Declaration
Objective-C
MSALInternalErrorAttemptToOpenURLFromExtension = -42404Swift
case internalErrorAttemptToOpenURLFromExtension = -42404 -
MSAL tried to show UI in the extension, which is not allowed.
Declaration
Objective-C
MSALInternalErrorUINotSupportedInExtension = -42405Swift
case internalErrorUINotSupportedInExtension = -42405 -
The state returned by the server does not match the state that was sent to the server at the beginning of the authorization attempt.
Declaration
Objective-C
MSALInternalErrorInvalidState = -42501Swift
case internalErrorInvalidState = -42501 -
Response was received in a network call, but the response body was invalid.
e.g. Response was to be expected a key-value pair with “key1” and the json response does not contain “key1” elements
Declaration
Objective-C
MSALInternalErrorInvalidResponse = -42600Swift
case internalErrorInvalidResponse = -42600 -
Server tried to redirect to non https URL.
Declaration
Objective-C
MSALInternalErrorNonHttpsRedirect = -42602Swift
case internalErrorNonHttpsRedirect = -42602 -
User returned manually to the application without completion authentication inside the broker
Declaration
Objective-C
MSALInternalErrorBrokerResponseNotReceived = -42700Swift
case internalErrorBrokerResponseNotReceived = -42700 -
MSAL cannot read broker resume state. It might be that application removed it, or NSUserDefaults is corrupted.
Declaration
Objective-C
MSALInternalErrorBrokerNoResumeStateFound = -42701Swift
case internalErrorBrokerNoResumeStateFound = -42701 -
MSAL cannot read broker resume state. It is corrupted.
Declaration
Objective-C
MSALInternalErrorBrokerBadResumeStateFound = -42702Swift
case internalErrorBrokerBadResumeStateFound = -42702 -
MSAL cannot read broker resume state. It is saved for a different redirect uri. The app should check its registered schemes.
Declaration
Objective-C
MSALInternalErrorBrokerMismatchedResumeState = -42703Swift
case internalErrorBrokerMismatchedResumeState = -42703 -
Invalid broker response.
Declaration
Objective-C
MSALInternalErrorBrokerResponseHashMissing = -42704Swift
case internalErrorBrokerResponseHashMissing = -42704 -
Corrupted broker response.
Declaration
Objective-C
MSALInternalErrorBrokerCorruptedResponse = -42705Swift
case internalErrorBrokerCorruptedResponse = -42705 -
Decryption of broker response failed.
Declaration
Objective-C
MSALInternalErrorBrokerResponseDecryptionFailed = -42706Swift
case internalErrorBrokerResponseDecryptionFailed = -42706 -
Unexpected broker response hash.
Declaration
Objective-C
MSALInternalErrorBrokerResponseHashMismatch = -42707Swift
case internalErrorBrokerResponseHashMismatch = -42707 -
Failed to create broker key.
Declaration
Objective-C
MSALInternalErrorBrokerKeyFailedToCreate = -42708Swift
case internalErrorBrokerKeyFailedToCreate = -42708 -
Couldn’t read broker key. Maybe broker key got wiped from the keychain.
Declaration
Objective-C
MSALInternalErrorBrokerKeyNotFound = -42709Swift
case internalErrorBrokerKeyNotFound = -42709 -
Broker returned unreadable result.
Declaration
Objective-C
MSALInternalErrorBrokerUnknown = -42711Swift
case internalErrorBrokerUnknown = -42711 -
Failed to write broker application token.
Declaration
Objective-C
MSALInternalErrorBrokerApplicationTokenWriteFailed = -42712Swift
case internalErrorBrokerApplicationTokenWriteFailed = -42712 -
Failed to read broker application token.
Declaration
Objective-C
MSALInternalErrorBrokerApplicationTokenReadFailed = -42713Swift
case internalErrorBrokerApplicationTokenReadFailed = -42713 -
Broker is either not found on device or not available for this configuration.
Declaration
Objective-C
MSALInternalBrokerNotAvailable = -42714Swift
case internalBrokerNotAvailable = -42714 -
JIT - Link - Error while waiting for server confirmation
Declaration
Objective-C
MSALInternalErrorJITLinkServerConfirmationError = -42715Swift
case internalErrorJITLinkServerConfirmationError = -42715 -
JIT - Link - Error while acquiring intune token
Declaration
Objective-C
MSALInternalErrorJITLinkAcquireTokenError = -42716Swift
case internalErrorJITLinkAcquireTokenError = -42716 -
JIT - Link - Token acquired for wrong tenant
Declaration
Objective-C
MSALInternalErrorJITLinkTokenAcquiredWrongTenant = -42717Swift
case internalErrorJITLinkTokenAcquiredWrongTenant = -42717 -
JIT - Link - Error during linking
Declaration
Objective-C
MSALInternalErrorJITLinkError = -42718Swift
case internalErrorJITLinkError = -42718 -
JIT - Compliance Check - Device not compliant
Declaration
Objective-C
MSALInternalErrorJITComplianceCheckResultNotCompliant = -42719Swift
case internalErrorJITComplianceCheckResultNotCompliant = -42719 -
JIT - Compliance Check - CP timeout
Declaration
Objective-C
MSALInternalErrorJITComplianceCheckResultTimeout = -42720Swift
case internalErrorJITComplianceCheckResultTimeout = -42720 -
JIT - Compliance Check - Result unknown
Declaration
Objective-C
MSALInternalErrorJITComplianceCheckResultUnknown = -42721Swift
case internalErrorJITComplianceCheckResultUnknown = -42721 -
JIT - JIT - Compliance Check - Invalid linkPayload from SSO configuration
Declaration
Objective-C
MSALErrorJITComplianceCheckInvalidLinkPayload = -42722Swift
case errorJITComplianceCheckInvalidLinkPayload = -42722 -
JIT - Compliance Check - Could not create compliance check web view controller
Declaration
Objective-C
MSALErrorJITComplianceCheckCreateController = -42723Swift
case errorJITComplianceCheckCreateController = -42723 -
JIT - Link - LinkConfig not found
Declaration
Objective-C
MSALErrorJITLinkConfigNotFound = -42724Swift
case errorJITLinkConfigNotFound = -42724 -
JIT - Link - Invalid LinkTokenConfig
Declaration
Objective-C
MSALErrorJITInvalidLinkTokenConfig = -42725Swift
case errorJITInvalidLinkTokenConfig = -42725 -
JIT - WPJ - Device Registration Failed
Declaration
Objective-C
MSALErrorJITWPJDeviceRegistrationFailed = -42726Swift
case errorJITWPJDeviceRegistrationFailed = -42726 -
JIT - WPJ - AccountIdentifier is nil
Declaration
Objective-C
MSALErrorJITWPJAccountIdentifierNil = -42727Swift
case errorJITWPJAccountIdentifierNil = -42727 -
JIT - WPJ - Failed to acquire broker token
Declaration
Objective-C
MSALErrorJITWPJAcquireTokenError = -42728Swift
case errorJITWPJAcquireTokenError = -42728 -
JIT - Retry JIT process (WPJ or Link)
Declaration
Objective-C
MSALErrorJITRetryRequired = -42729Swift
case errorJITRetryRequired = -42729 -
JIT - Unexpected status received from webCP troubleshooting flow
Declaration
Objective-C
MSALErrorJITUnknownStatusWebCP = -42730Swift
case errorJITUnknownStatusWebCP = -42730 -
JIT - Troubleshooting - Could not create web view controller
Declaration
Objective-C
MSALErrorJITTroubleshootingCreateController = -42731Swift
case errorJITTroubleshootingCreateController = -42731 -
JIT - Troubleshooting - Acquire token error
Declaration
Objective-C
MSALErrorJITTroubleshootingAcquireToken = -42732Swift
case errorJITTroubleshootingAcquireToken = -42732 -
JIT - Link - Timeout while waiting for server confirmation.
Declaration
Objective-C
MSALInternalErrorJITLinkServerConfirmationTimeout = -42733Swift
case internalErrorJITLinkServerConfirmationTimeout = -42733 -
JIT - Troubleshooting flow needed
Declaration
Objective-C
MSALErrorJITTroubleshootingRequired = -42734Swift
case errorJITTroubleshootingRequired = -42734 -
JIT - Troubleshooting - Result unknown
Declaration
Objective-C
MSALErrorJITTroubleshootingResultUnknown = -42735Swift
case errorJITTroubleshootingResultUnknown = -42735 -
Device is not PSSO registered
Declaration
Objective-C
MSALErrorDeviceNotPSSORegistered = -42736Swift
case errorDeviceNotPSSORegistered = -42736 -
// In PSSO, KeyId stored in passkey provider storage does not match NGC key, needs to configure and retry
Declaration
Objective-C
MSALErrorPSSOKeyIdMismatch = -42737Swift
case errorPSSOKeyIdMismatch = -42737 -
JIT - Error Handling config invalid or not found
Declaration
Objective-C
MSALErrorJITErrorHandlingConfigNotFound = -42738Swift
case errorJITErrorHandlingConfigNotFound = -42738 -
PSSO passkey - Biometric policy flag doesnt match with the loginConfig settings
Declaration
Objective-C
MSALErrorPSSOBiometricPolicyMismatch = -42739Swift
case errorPSSOBiometricPolicyMismatch = -42739 -
PSSO passkey - Invalid Passkey extension trying to access passkey
Declaration
Objective-C
MSALErrorPSSOInvalidPasskeyExtension = -42740Swift
case errorPSSOInvalidPasskeyExtension = -42740 -
PSSO save login config failure
Declaration
Objective-C
MSALErrorPSSOSaveLoginConfigFailure = -42741Swift
case errorPSSOSaveLoginConfigFailure = -42741 -
Error thrown when uses tries to acces passkey without biometric when biometric policy configured
Declaration
Objective-C
MSALErrorPSSOPasskeyLAError = -42742Swift
case errorPSSOPasskeyLAError = -42742 -
Error is thrown when PSSO user registration attempted with no biometrics available and sekey biometric policy is configured
Declaration
Objective-C
MSALErrorPSSOBiometricsNotAvailable = -42743Swift
case errorPSSOBiometricsNotAvailable = -42743 -
Error is thrown when PSSO user registration attempted with no biometrics configured and sekey biometric policy is configured
Declaration
Objective-C
MSALErrorPSSOBiometricsNotEnrolled = -42744Swift
case errorPSSOBiometricsNotEnrolled = -42744
View on GitHub