azureblog.co.uk
← cd ~/errors
// entra id sign-in error · consent and permissions

AADSTS70005

UnsupportedResponseType

What Microsoft says

The app returned an unsupported response type due to the following reasons: response type 'token' isn't enabled for the app; response type 'id_token' requires the 'OpenID' scope -contains an unsupported OAuth parameter value in the encoded wctx

How to fix it

Microsoft doesn't publish a specific fix for this code beyond the description above. This site groups it under consent and permissions, based on that description, so start with the steps below.

How to investigate

  1. Open the Enterprise App and check Users and groups (assignment) and Permissions (consent).
  2. Check whether user consent is allowed for this kind of permission, or whether an admin needs to grant it.
  3. Look at the app's requested permissions in the sign-in request or app registration.
  4. Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.

Tools that help

The description is quoted from Microsoft's error code reference. The grouping and investigation steps are this site's guidance.