-
Title
Error granting consent for Teams migration, "AADSTSxxxxxx: The app needs access to a service ("https://*.onenote.com/")" -
Description
When granting consent within the Tenants section of On Demand, you may encounter the following error granting consent for Teams:
Unexpected response while attempting to register the tenant: AADSTSxxxxxx: The app needs access to a service ("https://*.onenote.com/") that your organization "xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" has not subscribed to or enabled. Contact your IT Admin to review the configuration of your service subscriptions. Trace ID: xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Correlation ID: xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Timestamp: 2020-09-29 23:32:09Z
-
Cause
Cause 1: The admin account(s) used to grant Teams consent are not licensed for Teams in Office 365.Cause 2: OneNote is missing from the Enterprise Applications section in Azure Active Directory admin center. -
Resolution
Resolution 1: Add a Teams license to the admin accounts used to grant Teams consent for the source and target tenants.
You can test that this issue is resolved by going to https://www.onenote.com and logging in as both the source and target migration admin service accounts.
Resolution 2: Login to OneNote with the admin account used to grant consent. Perform this action for the source and target tenants. If OneNote was missing previously from Enterprise Applications, it should now be displayed after the admin logged on to OneNote.After performing the resolution that matches the cause, try regranting the Teams consent again. If you continue to encounter issues granting the consent, open a support request to have a Quest Support Engineer assist.
-
Additional Information
If for some reason when you go to OneNote.com you get an HTTP 500 Error you may also try the following; Login to Office.com, click on OneDrive and it should login successfully. Then try to grant consents for Teams, it should succeed.