Microsoft Entra ID

Native authentication API reference documentation

6 October 2026Doc update+260 / −260 lines

In brief

The native authentication API reference was updated with spelling corrections. The supplied examples, links, endpoints, error details, and configuration guidance remain unchanged.

What Entra admins need to know

No administrator action is required.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.


```json
{
   "challenge_type": "redirect"
}

Property	Description
`challenge_type`	Microsoft Entra returns a response that has a challenge type. The value of this challenge type is redirect, which enables the app to use the web-based authentication flow.

This response is considered successful, but the app is required to switch to a web-based authentication flow. In this case, we recommend that you use a Microsoft-built and supported authentication library.


```json
{
    "error": "invalid_request",
    "error_description": "AADSTS901007: The challenge_type list parameter does not include the 'redirect' type.\r\nTrace ID: 0000aaaa-11bb-cccc-dd22-eeeeee333333\r\nCorrelation ID: aaaa0000-bb11-2222-33cc-444444dddddd\r\nTimestamp: yyyy-...",
    "error_codes": [
        901007
    ],
    "timestamp": "yyyy-mm-dd 10:15:00Z",
    "trace_id": "0000aaaa-11bb-cccc-dd22-eeeeee333333",
    "correlation_id": "aaaa0000-bb11-2222-33cc-444444dddddd"
}

Property	Description
`error`	An error code string that can be used to classify types of errors, and to react to errors.
`error_description`	A specific error message that can help you to identify the cause of an authentication error.
`error_codes`	A list of Microsoft Entra-specific error codes that can help you to diagnose errors.
`timestamp`	The time when the error occurred.

Error value	Description
`invalid_request`	Request parameter validation failed such as when the `challenge_type` parameter includes an invalid challenge type.
`invalid_grant`	The continuation token included in the request isn't valid.
`expired_token`	The continuation token included in the request is expired.
`unsupported_challenge_type`	The `challenge_type` parameter value doesn't include the `redirect` challenge type.