Container Apps Authentication error - Cannot configure authentication

Chris 15 Reputation points
2023-06-19T02:38:36.3566667+00:00

When configuring authentication for a Container App using the Microsoft provider, this error is generated in the activity log 'Unknown properties tokenStore in Microsoft.ContainerApps.WebApi.Views.Version20221101Preview.LoginView are not supported'.

I chose the 'Workforce' tenant.

There is a brief toast displayed on the website 'Failed to add Microsoft identity provider settings'. The App registration is created in the 'Default Directory' but it is not attached to the app. Trying again and choosing 'Pick an existing app registration in this directory' gives the same error.

Azure Container Apps
Azure Container Apps
An Azure service that provides a general-purpose, serverless container platform.
328 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. jade wilson 0 Reputation points
    2023-06-22T16:00:48.1866667+00:00

    I appear to be getting the same issue.

    I get:
    "errors":{"$.properties.login":["Unknown properties tokenStore in Microsoft.ContainerApps.WebApi.Views.Version20221101Preview.LoginView are not supported"]}
    When trying to run via the portal.

    When I try to run through azure cli, I get:
    cli.azure.cli.core.azclierror: Authentication requires ingress to be enabled for your containerapp.
    az_command_data_logger: Authentication requires ingress to be enabled for your containerapp.

    When trying to run via the cli even though my ingress is enabled:image

    0 comments
  2. Eric Chefski 0 Reputation points
    2023-06-23T12:47:17.75+00:00

    It seems that I'm running into the same issue while following the guide Enable authentication and authorization in Azure Container Apps with Azure Active Directory.

    User's image

    Identity provider: Microsoft
    Tenant type: Workforce
    App registration type: Create new app registration/Pick an existing app registration in this directory (both tried)
    Restrict access: Require authentication
    Unauthenticated requests: HTTP 302 Found redirect: recommended for websites

    0 comments
  3. Nicholas Drake 0 Reputation points
    2023-06-24T22:47:17.68+00:00

    i tried your suggestions with az containerapp auth google update --debug --verbose --name ca-web-4a73yskoiju2e --resource-group rg-cnstlltn-prod --client-id ... --client-secret ...
    but i got the same error that
    cli.azure.cli.core.azclierror: Authentication requires ingress to be enabled for your containerapp.

    az_command_data_logger: Authentication requires ingress to be enabled for your containerapp.

    i was able to get this to work the key step is first need to do az login

    0 comments