This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 20%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESN%3C/text%3E%3C/svg%3E)
I am using the below reference and trying to add custom claims but it was not working. Could you please help me resolve this issue.
Ref Links :
https://github.com/azure-ad-b2c/samples/tree/master/policies/client_credentials_flow
if possible could you please provide me correct custom policy xml file
Error :
{
"error": "invalid_grant",
"error_description": "AADB2C90085: The service has encountered an internal error. Please reauthenticate and try again.\r\nCorrelation ID: 21e73d28-4e06-4c81-959a-00af1c5c078e\r\nTimestamp: 2025-04-30 14:47:41Z\r\n"
}
Thanks in advance!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 89%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHE%3C/text%3E%3C/svg%3E)
Hello @Shekhar Nadide ,
I Understand that you're encountering an issue when adding custom claims via a policy in the client credentials flow, resulting in the following error:
"error_description": "AADB2C90085: The service has encountered an internal error. Please reauthenticate and try again."
There could be several reasons for this error. Please review the following points:
Check your application manifest and ensure that the signInAudience is set to AzureADandPersonalMicrosoftAccount and not limited to your organization only.
Verify the status of your client secrets. If they have expired, generate new ones for your application.
Make sure that the user flow name in the token endpoint is in lowercase. Using uppercase characters can result in this error.
As requested, you can try using the following custom policy as a reference: Custom Policy Sample – B2C_1A_base.xml
Let me know if you have any further questions—happy to assist!
hi @Harshitha Eligeti than you for the reply.
I check the manifest it was configured as "signInAudience": "AzureADMultipleOrgs"
and secret is valid only as I am able to generate token using the token endpoint without policy name.
Could you please conduct one test from your end and confirm weather it really working or not. I almost spend so much time on this as per documentation it is not working. thanks in advance.
Hello @Shekhar Nadide
Please refer to this link for troubleshooting guidance. If the issue still persists after following the steps, feel free to reach out for further assistance:
https://learn.microsoft.com/en-us/answers/questions/1055427/aadb2c90085-cant-obtain-token-with-client-credenti