调用配置文件AddEngineAsync时，MIP SDK获取访问被拒绝错误

Question

我正在尝试使用MIP SDK设置标签。然而，当执行AddEngineAsync时，我得到拒绝访问错误。我能够从AAD应用程序获取访问令牌。任何帮助都是巨大的。

代码:

var engine = Task.Run(async () => await profile.AddEngineAsync(engineSettings)).Result;

错误:

Unhandled Exception: System.AggregateException: One or more errors occurred. ---> Microsoft.InformationProtection.Exceptions.AccessDeniedException: The service didn't accept the auth token. Challenge:['']
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at MipSdkDotNetQuickstart.Action.<>c__DisplayClass10_0.<<CreateFileEngine>b__0>d.MoveNext() in C:\Users\wb561362\Mip_ServicePrincipalAuth\mip-sdk-dotnet-file-SPA\Action.cs:line 178
   --- End of inner exception stack trace ---
   at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
   at MipSdkDotNetQuickstart.Action.CreateFileEngine(Identity identity) in C:\Users\wb561362\Mip_ServicePrincipalAuth\mip-sdk-dotnet-file-SPA\Action.cs:line 178
   at MipSdkDotNetQuickstart.Action..ctor(ApplicationInfo appInfo) in C:\Users\wb561362\Mip_ServicePrincipalAuth\mip-sdk-dotnet-file-SPA\Action.cs:line 113
   at MipSdkDotNetQuickstart.Program.Main(String[] args)

Answer 1

您应该验证您正在为正确的资源获取令牌。通常，当人们在他们的auth delegate实现中硬编码或不正确地处理auth质询时，我们会看到这个错误。

确保您没有对资源进行硬编码，并且您正在将作为参数提供给AcquireToken（）的资源传递给您的MSAL或ADAL实现。