Skip to content

Improve MtlsPopTokenNotSupportedinImdsV1 error message clarity #5908

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Copilot wants to merge 3 commits into
base: main
Choose a base branch
from
+1 −1
Open

Improve MtlsPopTokenNotSupportedinImdsV1 error message clarity #5908

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
9368b47
Initial plan
Copilot Apr 6, 2026
4438381
Update MtlsPopTokenNotSupportedinImdsV1 error message to be clearer a…
Copilot Apr 6, 2026
9d0979d
Fix escaped apostrophe in MtlsPopTokenNotSupportedinImdsV1 error message
Copilot Apr 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/client/Microsoft.Identity.Client/MsalErrorMessage.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -453,7 +453,7 @@ public static string InvalidTokenProviderResponseValue(string invalidValueName)
public const string MalformedOidcAuthorityFormat = "Possible cause: When using Entra External ID, you didn't append /v2.0, for example {0}/v2.0\"";
public const string InvalidCertificate = "The certificate received from the Imds server is invalid.";
public const string CannotSwitchBetweenImdsVersionsForPreview = "ImdsV2 is currently experimental - A Bearer token has already been received; Please restart the application to receive a mTLS PoP token.";
public const string MtlsPopTokenNotSupportedinImdsV1 = "A mTLS PoP token cannot be requested because the application\'s source was determined to be ImdsV1.";
public const string MtlsPopTokenNotSupportedinImdsV1 = "mTLS Proof of Possession with managed identity is currently in private preview and is not supported on this VM. Ensure you're running on a supported VM image.";
Copy link
Copy Markdown
Member

@bgavrilMS bgavrilMS Apr 10, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, but this is a point in time state. In some N months it will not be in private preview.

How about creating an aka.ms link (can be to our wiki) and explaining more there? And here you just give a messgae saying "The VM doesn't currently support mTLS POP tokens. See https://aka.ms/msal/imdsv2 for details)"

public const string ManagedIdentityAllSourcesUnavailable = "All Managed Identity sources are unavailable.";
}
}