A cloud-based identity and access management service for securing user authentication and resource access
AADSTS900561 means the authentication flow sent a GET request to an endpoint that only accepts POST requests.
For Microsoft Entra authentication flows, the token exchange must be a POST request to the token endpoint. In an OAuth 2.0 authorization code flow, the app first gets an authorization code, then must redeem that code by sending a POST request to the token endpoint with the required parameters.
If this is happening in a browser sign-in scenario, common causes include a broken sign-in session, stale cookies, blocked third-party cookies, or browser extensions interfering with authentication. Try these steps:
- Sign out completely, close all browser tabs, and start a new sign-in session.
- Try an InPrivate/Incognito window.
- Clear browser cache and cookies.
- Allow third-party cookies.
- In Edge: Settings > Privacy, search, and services > Cookies > turn off Block third-party cookies.
- In Chrome: Settings > Privacy and security > Third-party cookies > select Allow third-party cookies.
- Temporarily disable privacy/ad-blocking browser extensions.
- If the issue is app-based rather than browser-based, verify the app is exchanging the authorization code for a token by sending a POST request to the token endpoint, not a GET request.
If the error is coming from a custom or third-party application, the application owner needs to correct the authentication flow so the code redemption step uses POST.
- Microsoft identity platform and OAuth 2.0 authorization code flow
- AADSTS900561: The endpoint only accepts POST requests. Received a GET request - Microsoft Q&A Frustrating. I'm contacting support. I am signed in using my Microsoft account. Support website asks me to sign in....vide the following error data.
- SAP PI Mail Adapter with Oauth 2.0 to Microsoft Office 365 fails during authentication - Microsoft Q&A Hi,
- EMAIL ACCOUNT/HOTMAIL - Microsoft Q&A PROBLEM ENTERING MY HOTMAIL ACCOUNT TO SEE MY EMAILS