azureblog.co.uk
← cd ~/errors
// entra id sign-in error · app registration and tokens

AADSTS700054

ID token implicit grant not enabled

What it means

response_type 'id_token' isn't enabled for the app.

How to fix it

Enable ID tokens for implicit grant on the app registration, or better, move to the authorization code flow.

How to investigate

  1. Compare what the app sends (client ID, redirect URI, scopes, tenant) with the app registration.
  2. Decode the token or request: the JWT and SAML decoders on this site show exactly what was sent.
  3. Check the app's credentials (secrets and certificates) and whether the service principal exists and is enabled in this tenant.
  4. Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.

Tools that help

Error names and meanings follow Microsoft's error code reference. The fixes are this site's guidance.