I have a few multi-tenant application on AAD App which requests access to Mail, Calendar, Contacts and Tasks . The apps works successfully for a few years without any issue, but last few days started to get error :
"AADSTS650051: Application 'CLIENT_ID' is requesting permissions that are either invalid or out of date"
All of them !!! Without anything that changed in apps permissions settings. So, new domains can't now install those apps.
Remove app from the installed domain and install it again, doesn't helps.
Please advise. Thanks
Well, found an issue - two permissions, one of them is Deprecated_ThreatIntelligence.Read, was not able to remove it, when tried to remove got ok, but permission was there again. After talking with MS support (paid support, after 48 hours of phone and email conversations) got nothing from them expect :
I would like to inform you that I have reached out to my peer engineers with all this information and waiting for their suggestion to proceed with further investigation on it.
I would request you to allow me sometime so that I can discuss with my peer engineers and get back to you with an update on it.
Had no choice and needed to solve this quick as possible, found a way to remove , downloaded manifest (it'a app configuration JSON), removed problematic permission (not an easy task, as there's only guids) and uploaded manifest again. Issue solved. Shame on microsoft support !!!! One of the useless paid support I ever saw. Can't do anything except waiting for feedback from engineers. This issue supposed to be fixed by support within 5-10 minutes, once they have request id and correlation id, but they didn't find a solution up till now. And shame on Microsoft, lost customers for last 10 days, due to their weird bugs.