Azure Cloud Shell, Conditional Access and a device from a platform (Unknown) #18911

Open
opened 2026-01-31 06:28:06 +00:00 by claunia · 9 comments
Owner

Originally created by @dronkoff on GitHub (Nov 17, 2022).

Windows Terminal version

1.15.2875.0

Windows build number

10.0.22621.0

Other Software

No response

Steps to reproduce

  1. Open WT,
  2. Open new Azure Cloud Shell tab,
  3. Follow the Device Loging procedure,
  4. After successful login a list of tenants will be displayed,
  5. Select a tenant with a conditional access policy for supported device platforms.

Expected Behavior

After selecting a tenant, an expected behavior is to see the question "Do you want to save these connection settings for future logins?", then "Requesting a cloud shell instance...", etc.

Actual Behavior

AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors.
Trace ID: 181f4dd3-939b-4e6b-9544-b1b898145d00
Correlation ID: 963c9066-e711-4014-bd50-5973700a5fe0
Timestamp: 2022-11-17 17:20:15Z
[process exited with code 1 (0x00000001)]

Originally created by @dronkoff on GitHub (Nov 17, 2022). ### Windows Terminal version 1.15.2875.0 ### Windows build number 10.0.22621.0 ### Other Software _No response_ ### Steps to reproduce 1. Open WT, 2. Open new Azure Cloud Shell tab, 3. Follow the Device Loging procedure, 4. After successful login a list of tenants will be displayed, 5. Select a tenant with a conditional access policy for supported device platforms. ### Expected Behavior After selecting a tenant, an expected behavior is to see the question "Do you want to save these connection settings for future logins?", then "Requesting a cloud shell instance...", etc. ### Actual Behavior AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors. Trace ID: 181f4dd3-939b-4e6b-9544-b1b898145d00 Correlation ID: 963c9066-e711-4014-bd50-5973700a5fe0 Timestamp: 2022-11-17 17:20:15Z [process exited with code 1 (0x00000001)]
claunia added the Help WantedIssue-BugProduct-TerminalArea-AzureShell labels 2026-01-31 06:28:06 +00:00
Author
Owner

@lhecker commented on GitHub (Nov 21, 2022):

This appears to be a duplicate of #8158. Would you agree with that?

@lhecker commented on GitHub (Nov 21, 2022): This appears to be a duplicate of #8158. Would you agree with that?
Author
Owner

@dronkoff commented on GitHub (Nov 23, 2022):

Similar, but not sure if the same. In #8158 policy checks if a device is domain joined or not, in this case the question is in platform.
I'm trying to connect to the Azure Cloud Shell from WT on a domain joined Win 11 machine to a tenant that checks the platform (Windows is allowed). However, the tenant sees my platform as Unknown rather than Windows and denies access.

@dronkoff commented on GitHub (Nov 23, 2022): Similar, but not sure if the same. In #8158 policy checks if a device is domain joined or not, in this case the question is in platform. I'm trying to connect to the Azure Cloud Shell from WT on a domain joined Win 11 machine to a tenant that checks the platform (Windows is allowed). However, the tenant sees my platform as Unknown rather than Windows and denies access.
Author
Owner

@coujean99 commented on GitHub (Dec 2, 2022):

I have the same problem here
image

@coujean99 commented on GitHub (Dec 2, 2022): I have the same problem here ![image](https://user-images.githubusercontent.com/54377330/205214896-55dd84dd-7ed1-403b-82de-82e73935c80f.png)
Author
Owner

@dronkoff commented on GitHub (Dec 16, 2022):

@hiskhafan , unfortunately that didn't work.

AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors.

@dronkoff commented on GitHub (Dec 16, 2022): @hiskhafan , unfortunately that didn't work. > AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors.
Author
Owner

@TeddyAlbina commented on GitHub (Jan 25, 2023):

Same problem form me :(

@TeddyAlbina commented on GitHub (Jan 25, 2023): Same problem form me :(
Author
Owner

@lhecker commented on GitHub (Jan 25, 2023):

Wouldn't it be funny if it used the User-Agent header to detect the client platform like so many websites do it? We send Terminal/0.0.

@lhecker commented on GitHub (Jan 25, 2023): Wouldn't it be funny if it used the `User-Agent` header to detect the client platform like so many websites do it? We send `Terminal/0.0`.
Author
Owner

@Adelscott commented on GitHub (Jan 30, 2023):

I have the same problem here image

Add the same problem. Then ran Cloud Shell from the web interface on the Azure Portal, it told me Storage Account was missing and created it. Problem solved

@Adelscott commented on GitHub (Jan 30, 2023): > I have the same problem here ![image](https://user-images.githubusercontent.com/54377330/205214896-55dd84dd-7ed1-403b-82de-82e73935c80f.png) Add the same problem. Then ran Cloud Shell from the web interface on the Azure Portal, it told me Storage Account was missing and created it. Problem solved
Author
Owner

@davidajacobus commented on GitHub (Feb 1, 2023):

This could be a missing Storage Account for Cloud Shell. You can log into Azure Portal and check for a storage account tied to the Resource Group cloud-shell-storage-<region> or, select the Cloud Shell in your browser:
image
and select "Powershell". You will see a notice such as below if it's missing. Once setup, your cloud shell will operate and then try the Azure Cloud Shell from Terminal again.
image

@davidajacobus commented on GitHub (Feb 1, 2023): This could be a missing Storage Account for Cloud Shell. You can log into Azure Portal and check for a storage account tied to the Resource Group `cloud-shell-storage-<region>` or, select the Cloud Shell in your browser: ![image](https://user-images.githubusercontent.com/331429/216048451-67280999-548f-49eb-9cc3-318deca3fa50.png) and select "Powershell". You will see a notice such as below if it's missing. Once setup, your cloud shell will operate and then try the Azure Cloud Shell from Terminal again. ![image](https://user-images.githubusercontent.com/331429/216048777-ce3c6a2b-8d06-4418-842e-1e58db92a914.png)
Author
Owner

@dronkoff commented on GitHub (Feb 2, 2023):

Folks, this is NOT a missing storage. Storage account is there and a Cloud Shell works from a browser.
If you check the issue text, the error message is: "AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors."

@dronkoff commented on GitHub (Feb 2, 2023): Folks, this is NOT a missing storage. Storage account is there and a Cloud Shell works from a browser. If you check the issue text, the error message is: "_AADSTS50005: User tried to log in to a device from a platform (Unknown) that's currently not supported through Conditional Access policy. Supported device platforms are: iOS, Android, Mac, and Windows flavors._"
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#18911