Share via

AADSTS90009: Application 'f2cd7b16-a8f8-4d8b-a084-a5ce80396679'(api://f2cd7b16-a8f8-4d8b-a084-a5ce80396679) is requesting a token for itself in Excel while connecting Excel addin to Business central On-prem

Manoj S 0 Reputation points
2025-04-15T11:48:02.8333333+00:00

I'm trying to connect BC25 Onprem to Excel add in. I have followed all the steps and given the exact values as per the documentation

Below is the error that i receive after trying to sign in
User's image

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,284 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kancharla Saiteja 3,565 Reputation points Microsoft External Staff
    2025-04-16T19:43:20.38+00:00

    Hi Manoj S,

    Based on your query, here is my understanding: You have configured an application registration and while accessing the application, you received the following.

    The errors displayed for app registration when the requested scope is either /default or does not provide right scope to retrieve access token. As per this document, you have registered an application in Entra where you need to slight changes in order to avoid the error. (The application you registered will be mentioned in this solution as Main application in this solution. Wherever you see my mention as Main application that means we are talking about the application you configured using the above document.)

    Please follow this document and configure a Web API and make it as an Organization API with the required permissions to your application: Configure an application to expose a web API.

    Now you need to go through the following document, to add it as an API for your Main application:

    Add permissions to access your web API.

    Steps to perform using the following document in your Main Application:

    1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
    2. If you have access to multiple tenants, use the Settings icon in the top menu to switch to the tenant containing the app registration from the Directories + subscriptions menu.
    3. Browse to Identity > Applications > App registrations, and then select your Main application (not your web API).
    4. Select API permissions, then Add a permission and select My APIs in the sidebar.
    5. Select the web API you registered as part of the prerequisites, and select Delegated permissions
    6. Under Select permissions, expand the resource whose scopes you defined for your web API, and select the permissions the client app should have on behalf of the signed-in user.
    7. Select Add permissions and Grant admin consent to complete the process.

    Once the process is done you can now try authentication of the application and check the scenario.

    I hope this information is helpful. Please feel free to reach out if you have any further questions.

    If the answer is helpful, please click "Accept Answer" and kindly "upvote it". If you have extra questions about this answer, please click "Comment"

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.