Entra
Microsoft Entra invalid scope requested
AADSTS70011: InvalidScope
Microsoft Entra rejected the request because the application asked for an invalid, misspelled, or unsupported OAuth scope.
Error AtlasError Documentation and ResolutionObserved message
AADSTS70011: InvalidScope
Why it happens
- The application requested a scope that does not exist.
- The scope string is malformed or misspelled.
- The app is requesting a scope that is not valid for the targeted resource.
How to fix it
- Check the requested scope strings for spelling and format.
- Confirm the scope belongs to the intended Microsoft resource or app registration.
- Update the app configuration to request only valid scopes.
Official reference
Microsoft Learn: Microsoft Entra authentication and authorization error codesRelated errors
Explore more