diff --git a/docs/en/How-To/Azure-Active-Directory-Authentication-MVC.md b/docs/en/How-To/Azure-Active-Directory-Authentication-MVC.md
index 10b1e05a4a..434d5f8bac 100644
--- a/docs/en/How-To/Azure-Active-Directory-Authentication-MVC.md
+++ b/docs/en/How-To/Azure-Active-Directory-Authentication-MVC.md
@@ -158,6 +158,17 @@ You can find the source code of the completed example [here](https://github.com/
````
+* Help! I am getting ***System.ArgumentNullException: Value cannot be null. (Parameter 'userName')*** error!
+
+
+ * This occurs when you use Azure Authority **v2.0 endpoint** without requesting `email` scope. [Abp checks unique email to create user](https://github.com/abpframework/abp/blob/037ef9abe024c03c1f89ab6c933710bcfe3f5c93/modules/account/src/Volo.Abp.Account.Web/Pages/Account/Login.cshtml.cs#L208). Simply add
+
+ ````csharp
+ options.Scope.Add("email");
+ ````
+
+ to your openid configuration.
+
* Help! I keep getting ***AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application*** error!
* If you set your **CallbackPath** in appsettings as:
@@ -169,18 +180,19 @@ You can find the source code of the completed example [here](https://github.com/
}
````
- your **Redirect URI** of your application in azure portal must be with domain like `https://localhost:44320/signin-azuread-oidc`, not only `/signin-azuread-oidc`.
+ your **Redirect URI** of your application in azure portal must be with domain like `https://localhost:44320/signin-azuread-oidc`, not only `/signin-azuread-oidc`.
+
+* Help! I keep getting ***AADSTS700051: The response_type 'token' is not enabled for the application.*** error!
-* Help! I am getting ***System.ArgumentNullException: Value cannot be null. (Parameter 'userName')*** error!
+ * This error occurs when you request **token** (access token) along with **id_token** without enabling Access tokens on Azure portal app registrations. Simply tick **Access tokens** checkbox located on top of ID tokens to be able to request token aswell.
+* Help! I keep getting ***AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret*** error!
- * This occurs when you use Azure Authority **v2.0 endpoint** without requesting `email` scope. [Abp checks unique email to create user](https://github.com/abpframework/abp/blob/037ef9abe024c03c1f89ab6c933710bcfe3f5c93/modules/account/src/Volo.Abp.Account.Web/Pages/Account/Login.cshtml.cs#L208). Simply add
-
- ````csharp
- options.Scope.Add("email");
- ````
-
- to your openid configuration.
+ * This error occurs when you request **code** along with **id_token**. You need to add **client secret** on azure portal app registrations, under **Certificates & secrets** menu. Afterwards, you need to add openid configuration option like:
+
+ ````csharp
+ options.ClientSecret = "Value of your secret on azure portal";
+ ````
* How can I **debug/watch** which claims I get before they get mapped?
@@ -188,13 +200,12 @@ You can find the source code of the completed example [here](https://github.com/
````csharp
options.Events.OnTokenValidated = (async context =>
- {
- var claimsFromOidcProvider = context.Principal.Claims.ToList();
- await Task.CompletedTask;
- });
+ {
+ var claimsFromOidcProvider = context.Principal.Claims.ToList();
+ await Task.CompletedTask;
+ });
````
-
## See Also
* [How to Customize the Login Page for MVC / Razor Page Applications](Customize-Login-Page-MVC.md).