[Documentation] Authentication documentation error for azure-graph sdk using interactive authentication

Error Observed

Documentation/Authentication.md references tokenAudience of graph, but it should be https://graph.microsoft.com. Using graph will result in the error below. Using Service Principal Authentication with the subscription and tenant works fine.

AADSTS500011 The resource principal named 'graph' was not found in the tenant named [currentTenantID].

Recommended Fix

Update the following:

const AzureGraphClient = require('azure-graph');
const MsRestAzure = require('ms-rest-azure');

const options = {
  tokenAudience: 'graph',
  domain: '<tenantId>' 
};

MsRestAzure.interactiveLogin(options, (err, credentials) => {
  if (err) throw err;

  let graphClient = AzureGraphClient(credentials, '<tenantId>');

  // ..use the client instance to manage service resources.
});

To:

const AzureGraphClient = require('azure-graph');
const MsRestAzure = require('ms-rest-azure');

const options = {
  tokenAudience: 'https://graph.microsoft.com',
  domain: '<tenantId>' 
};

MsRestAzure.interactiveLogin(options, (err, credentials) => {
  if (err) throw err;

  let graphClient = AzureGraphClient(credentials, '<tenantId>');

  // ..use the client instance to manage service resources.
});

[ramya-rao-a]

Closing as the docs are now updated with #5187

Thanks for logging the issue and working with us @joshlarsen!

[ramya-rao-a]

@joshlarsen Using ms-rest-azure is not the problem here. My question was around using the azure-graph package.

The newer Microsoft Graph API is recommended over the older Azure AD Graph API.

The azure-graph package is for the latter. The@microsoft/microsoft-graph-client package is for the former.

Regardless, since you don’t have control over the tool that uses azure-graph I believe you have no control over moving to Microsoft Graph either.

@willmtemple, I believe we can take the path of least resistance here and just update the docs like @joshlarsen suggested.