TokenAcquirerTests.CertificateRotationTest.TestCertificateRotationAsync Test Failure

[mdchennu]

Microsoft.Identity.Web Library

Microsoft.Identity.Web

Microsoft.Identity.Web version

3.6.2

Web app

Sign-in users and call web APIs

Web API

Not Applicable

Token cache serialization

Not Applicable

Description

For the failing test, the created web app results in the error below when attempting to rotate the certificate.

This issue comes from the app configuration in the dev app. We need to add our service tree ID to the dev app's configuration.

Some link I found that could be helpful: https://eng.ms/docs/microsoft-security/identity/entra-developer-application-platform/app-vertical/aad-first-party-apps/identity-platform-and-access-management/microsoft-identity-platform/first-party-alert/service-tree-required-for-entra-app-creation

Reproduction steps

1. Run all tests within ID Web
2. Look through logs in this test: TokenAcquirerTests.CertificateRotationTest.TestCertificateRotationAsync

Error message

Message: 
Microsoft.Graph.Models.ODataErrors.ODataError : ServiceManagementReference field is required for Create, but is missing in the request. Refer to the TSG https://aka.ms/service-management-reference-error for resolving the error

Stack Trace: 
HttpClientRequestAdapter.ThrowIfFailedResponse(HttpResponseMessage response, Dictionary2 errorMapping, Activity activityForAttributes, CancellationToken cancellationToken) HttpClientRequestAdapter.SendAsync[ModelType](RequestInformation requestInfo, ParsableFactory1 factory, Dictionary2 errorMapping, CancellationToken cancellationToken) HttpClientRequestAdapter.SendAsync[ModelType](RequestInformation requestInfo, ParsableFactory1 factory, Dictionary2 errorMapping, CancellationToken cancellationToken) ApplicationsRequestBuilder.PostAsync(Application body, Action1 requestConfiguration, CancellationToken cancellationToken)
CertificateRotationTest.CreateDaemonAppRegistrationAsync() line 227
CertificateRotationTest.CreateDaemonAppRegistrationIfNeededAsync() line 193
CertificateRotationTest.TestCertificateRotationAsync() line 47
--- End of stack trace from previous location ---

Id Web logs

No response

Relevant code snippets

N/A

Regression

No response

Expected behavior

The expected behavior should be the test passing.

[jmprieur]

This is a test bug due to a change in the 1P test environment.

What needs to be done is, when creating the application here, we need to add an extra parameter: serviceManagementReference set to 20504242-2c9d-4a5f-aac8-684e401e1119.

If there is no such property on the Application class, one needs to add the ExtraProprerties dictionary (not too sure of the name but something like that)