Jean-Marc Prieur

This seems to be an error with the portal / app-model There shouldn't be an accessTokenAcceptedVersion for the client, as it's not a web API? Which folder is this @bgavrilMS...

@marc-personeni you'll find the OBO sample here: https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/tree/master/2.%20Web%20API%20now%20calls%20Microsoft%20Graph

@bgavrilMS : which chapter of the sample is it? the problem is that in multi-tenant applications, the web API needs to be approved by a tenant admin. Let's discuss if...

@dpaulino it will work provided you change the audience of your web API to be [Accounts in any organizational directory and personal Microsoft accounts (e.g. Skype, Xbox, Outlook.com)](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/tree/master/3.-Web-api-call-Microsoft-graph-for-personal-accounts#register-the-service-app-todolistclient-and-service) - which...

@dpaulino Could you please debug the web API by using the [TodoListService launch profile](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/blob/6aec0096cf0ad355a74d20f3c46d786bc8dc428b/1.%20Desktop%20app%20calls%20Web%20API/TodoListService/Properties/launchSettings.json#L20), which is kestrel, not IIS, and look at the logs that appear in the console. you...

Thanks for the update @dpaulino I didn't know either. I wonder if this is recent. @jennyf19 @henrik-me : let's try to improve the error message if we can at the...

@SLdragon : which of the sub folders are you using? I don't see this behavior? How did you register the application? With which account did you sign-in in the client?

@SLdragon : did you try to use the AppCreationScripts?

@SLdragon : can you please try to use the scripts. Then you could compare the manifests

@SLdragon If you already ran the script, you'd want to use the CleanUp.ps1 script first (in the same folder). Does your tenant have issuer validation? Would it be a free...