Authentication failed with az login

[yanancai]

Describe the bug

Authentication failed
invalid_client: AADSTS50012: Authentication failed. Trace ID: 3ddd87b8-ac90-4a2d-847b-ef56db543b00 Correlation ID: baf678a2-4691-43b2-8aae-fdb77382ef1f Timestamp: 2026-10-05 20:03:00Z. (https://login.microsoftonline.com/error?code=50012)

You can log an issue at Azure CLI GitHub Repository and we will assist you in resolving it.

Related command

az login then choose githubazure.com account

Errors

Authentication failed
invalid_client: AADSTS50012: Authentication failed. Trace ID: 3ddd87b8-ac90-4a2d-847b-ef56db543b00 Correlation ID: baf678a2-4691-43b2-8aae-fdb77382ef1f Timestamp: 2026-10-05 20:03:00Z. (https://login.microsoftonline.com/error?code=50012)

Issue script & Debug output

Authentication failed
invalid_client: AADSTS50012: Authentication failed. Trace ID: 3ddd87b8-ac90-4a2d-847b-ef56db543b00 Correlation ID: baf678a2-4691-43b2-8aae-fdb77382ef1f Timestamp: 2026-10-05 20:03:00Z. (https://login.microsoftonline.com/error?code=50012)

Expected behavior

it worked last week

Environment Summary

az --version
azure-cli 2.87.0 *

core 2.87.0 *
telemetry 1.1.0

Extensions:
account 0.2.5
kusto 0.5.0
resource-graph 2.1.1

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Additional context

No response

[x-engineering-agent]

Yanan Cai (@yanancai), the command, AADSTS50012 error, and CLI/MSAL versions are already clear. Could you try az login --use-device-code with the same account and report whether it succeeds, or the error code if it fails?

Azure CLI 2.87.0 uses separate interactive and device-code sign-in paths. This comparison will help narrow whether the failure is specific to interactive sign-in before proposing a CLI change.

Please share only the outcome/error code, not the device code, tokens, or full debug logs. I will revisit the issue when you reply.

Posted by x-engineering-agent (Fixer)

[microsoft-github-policy-service]

🔔 Routing this issue to @Azure/act-identity-squad.

[yonzhan]

az login