Azure AD application takes time to activate?

Question

1. I am creating an application in Azure tenant with Microsoft graph API. At the same time, I am also uploading a self-signed certificate/ Client secret for an application.
2. The OAuth client can request an access token by providing the user assertion. User assertion is self-signed x509 certificate.

I am observing different behaviors when trying to get access token using user assertion:

• When tried to get access token for an application after 7-8 hrs of registration process, I am able to successfully get the access token.

• When tried to get access token for an immediately registered application, it fails with following "Invalid_client" error.

I am observing same behavior with client secret or self signed certificate. No Microsoft documentation is available around this.

Could anyone help me with the same? Attaching the error screenshot.

Answer 1

There is some delay for the client secret and self-signed certificate to take effect, it is normal.

The specific delay time depends on the specific tenant, let's say big tenant and small tenant here. The big tenant has many directory objects, e.g. users, applications, etc, and the small tenant just has several objects.

Pey my test, the delay time of the big tenant is much longer than the time of the small tenant, the bigger the tenant, the longer the time, from several minutes to several hours.

So in your case, I suppose your tenant should belong to the big tenant, you can also test it in a small tenant by yourself, you will find the client secret and self-signed certificate will take effect soon.