Azure Key Vault - AADSTS70001: Application with identifier “xxx” was not found in the directory “xxx”

17
votes

I am working on – Using azure key vault in web application. Implemented steps below, but getting error.

Steps:

  1. Created azure active directory and added application in this directory. (copied - Client id and key)
  2. Created azure key vault using power shell in the same subscription. (Successfully created key vault, along with some keys).
  3. In web application code implemented using azure key vault library. But getting error saying that : -

AADSTS70001: Application with identifier 'c4687eec-d6f1-420a-8d25-9be20a78c98a' was not found in the directory a7682f3c-49a6-41f1-9865-343579044071

Trace ID: b3653879-9603-4c10-a620-ded52f5c5d05

Correlation ID: b740d27e-ab99-4f0a-9cec-9d57c4acc2d7

Timestamp: 2015-11-19 06:36:32Z

This application exists in active directory in the same subscription.

Referred links:

  1. https://azure.microsoft.com/en-in/documentation/articles/key-vault-use-from-web-application/
  2. https://azure.microsoft.com/en-in/documentation/articles/key-vault-get-started/
1
azureazure-keyvault
I have a very similar problem. I have no idea what could go wrong. If you've found a solution, please post it – t_tia
@t_tia try registering your application in the default Azure AD directory of your subscription. See my answer below. – MvdD
Thanks @MvdD, I was not working on default directory. I tried in default directory and it's working fine now. – Kumar
@t_tia try in default directory, if do not succeed comment here. – Kumar
Only if there was a law to prosecute bad software designers. After spending hours I still can't figure out what to do with this issue. My app IS inside default directory yet I keep getting the same message. – Allen King

1 Answers

7
votes

You say you've Created azure active directory and added application in this directory.

This means you've registered your application in the non-default directory for the subscription. Due to a limitation in Azure KeyVault, you can only authorize applications in the default directory to use KeyVault.

See this page for an official source. You can vote to have this issue fixed here.