search

Azure-Samples / azure-search-openai-demo

A sample app for the Retrieval-Augmented Generation pattern running in Azure, using Azure AI Search for retrieval and Azure OpenAI large language models to power ChatGPT-style and Q&A experiences.
https://azure.microsoft.com/products/search
MIT License
6.04k stars 4.14k forks source link

Unable to access the application due to AADSTS90009: error #1534

Open achu152 opened 6 months ago

achu152 commented 6 months ago

This issue is for a: (mark with an x)

- [ x ] bug report -> please search issues before submitting
- [ ] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

Tried deploying the application via service principal from azure devops . However not able to access the application due to below error AADSTS90009: Application '*'(api://**) is requesting a token for itself. This scenario is supported only if resource is specified using the GUID based App Identifier.

Any log messages given by the failure

AADSTS90009: Application '*'(api://**) is requesting a token for itself. This scenario is supported only if resource is specified using the GUID based App Identifier.

Expected/desired behavior

OS and Version?

Windows 7, 8 or 10. Linux (which distribution). macOS (Yosemite? El Capitan? Sierra?)

azd version?

run azd version and copy paste here.

Versions

Mention any other details that might be useful

Thanks! We'll be in touch soon.

pamelafox commented 6 months ago

Hm, so I presume you have user authentication enabled, correct? I have not attempted setting up CI/CD for this app with user authentication enabled. It's possible we need to do something special, since our preprovision/postprovision hooks set up the Entra application registrations, and they may be doing the wrong thing in the CI environment.