Error AtlasError Documentation and Resolution
Back to search

Microsoft Entra ID

Microsoft Entra rejected the requested scope as invalid

AADSTS70011: The provided request must include a 'scope' input parameter.

Microsoft Entra ID rejected the authorization or token request because the scope value is missing, malformed, or not valid for the target application or resource.

AADSTS70011configuration

Observed message

AADSTS70011: The provided request must include a 'scope' input parameter.

Why it happens

  • The request is missing the required scope parameter.
  • The scope string is malformed or contains invalid values.
  • The requested scopes do not belong to the target resource or app registration.

How to fix it

  1. Verify that the request includes the correct scope parameter.
  2. Check the exact scope values against the resource's documented scopes.
  3. Remove invalid or mismatched scopes from the request.

Official reference

Microsoft Entra authentication and authorization error codes

Related errors

AADSTS650056Microsoft Entra rejected the app as misconfiguredAADSTS650057Microsoft Entra rejected the requested resource as invalid for the appAADSTS54005Microsoft Entra authorization code was already redeemedAADSTS7000215Microsoft Entra client secret is invalid

Explore more

configurationBrowse more configuration errors
AADSTS70011 invalid scope in Microsoft Entra | Error Atlas