Azure Cloud Shell doesn't work with Azure Government #8672

Closed
opened 2026-01-31 01:35:11 +00:00 by claunia · 2 comments
Owner

Originally created by @agates on GitHub (May 29, 2020).

Signing into the Azure Cloud Shell via the browser fails.

Environment

Windows build number: 10.0.18363.0
Windows Terminal version (if applicable): 1.0.1401.0

Azure Government subscription

Steps to reproduce

  1. Open an Azure Cloud Shell
  2. Enter code at https://microsoft.com/devicelogin
  3. Sign into government cloud account

Expected behavior

Expected to be signed into Azure Cloud Shell

Actual behavior

I get two error messages:

Sorry, but we're having trouble signing you in.
AADSTS65002: Consent between first party application '245e1dee-74ef-4257-a8c8-8208296e1dfd' and first party resource '797f4846-ba00-4fd7-ba43-dac1f8f63013' must be configured via preauthorization. Visit https://identitydocs.azurewebsites.net/static/aad/preauthorization.html for details

Logging into https://identitydocs.azurewebsites.net/static/aad/preauthorization.html gives this:

AADSTS900381: Request redirection failed. Tenant 'redacted' specified belongs to the National Cloud 'MicrosoftOnline.COM', but Current Cloud Instance 'microsoftonline.us' does not federate with 'MicrosoftOnline.COM'.

Is there another preauthorization page I need to visit for gov cloud? Or is this just not supported?

Originally created by @agates on GitHub (May 29, 2020). Signing into the Azure Cloud Shell via the browser fails. # Environment Windows build number: 10.0.18363.0 Windows Terminal version (if applicable): 1.0.1401.0 Azure Government subscription # Steps to reproduce 1. Open an Azure Cloud Shell 2. Enter code at https://microsoft.com/devicelogin 3. Sign into government cloud account # Expected behavior Expected to be signed into Azure Cloud Shell # Actual behavior I get two error messages: ``` Sorry, but we're having trouble signing you in. AADSTS65002: Consent between first party application '245e1dee-74ef-4257-a8c8-8208296e1dfd' and first party resource '797f4846-ba00-4fd7-ba43-dac1f8f63013' must be configured via preauthorization. Visit https://identitydocs.azurewebsites.net/static/aad/preauthorization.html for details ``` Logging into https://identitydocs.azurewebsites.net/static/aad/preauthorization.html gives this: ``` AADSTS900381: Request redirection failed. Tenant 'redacted' specified belongs to the National Cloud 'MicrosoftOnline.COM', but Current Cloud Instance 'microsoftonline.us' does not federate with 'MicrosoftOnline.COM'. ``` Is there another preauthorization page I need to visit for gov cloud? Or is this just not supported?
claunia added the Resolution-Duplicate label 2026-01-31 01:35:11 +00:00
Author
Owner

@DHowett commented on GitHub (May 29, 2020):

Sorry about the issue. We're tracking this one over in /dup #3597. There's some compliance stuff we need to do before we can roll out to sovereign clouds. 😄

@DHowett commented on GitHub (May 29, 2020): Sorry about the issue. We're tracking this one over in /dup #3597. There's some compliance stuff we need to do before we can roll out to sovereign clouds. :smile:
Author
Owner

@ghost commented on GitHub (May 29, 2020):

Hi! We've identified this issue as a duplicate of another one that already exists on this Issue Tracker. This specific instance is being closed in favor of tracking the concern over on the referenced thread. Thanks for your report!

@ghost commented on GitHub (May 29, 2020): Hi! We've identified this issue as a duplicate of another one that already exists on this Issue Tracker. This specific instance is being closed in favor of tracking the concern over on the referenced thread. Thanks for your report!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#8672