Azure-docs: Exception calling "AcquireAccessToken" with "1" argument(s): "multiple_matching_tokens_detected: The cache contains multiple tokens satisfying the requirements. Call AcquireToken again providing more arguments (e.g. UserId)"

[AakashMasand]

The error occurs while running the powershell script provided.

Exception calling "AcquireAccessToken" with "1" argument(s): "multiple_matching_tokens_detected: The cache contains multiple tokens satisfying the requirements. Call AcquireToken again
providing more arguments (e.g. UserId)"
At line:4 char:1

• $token = $profileClient.AcquireAccessToken($azContext.Subscription.Te ...
• ~~~~~~~~~~~~~~~~~
  
  
  
  • CategoryInfo : NotSpecified: (:) [], MethodInvocationException
  
  
  • FullyQualifiedErrorId : AdalException
  
  

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 7a6a5887-ea7a-5cae-b0a0-62ebc5a140ae
• Version Independent ID: 84476c7d-ab41-1f02-44c9-25ce1eaa1315
• Content: Get policy compliance data - Azure Policy
• Content Source: articles/governance/policy/how-to/get-compliance-data.md
• Service: azure-policy
• GitHub Login: @DCtheGeek
• Microsoft Alias: dacoulte

[AdamS-MSFT]

@AakashMasand Thanks for the feedback! I have assigned the issue to the content author to evaluate and update as appropriate.

[DCtheGeek]

@AakashMasand Sorry for the delay, I've been out-of-office. That page has a lot of PowerShell examples. Which one specifically are you running that gave you that error message?

@MicrosoftDocs/azure-cxp-triage #in-progress

[DCtheGeek]

@AakashMasand I missed that you included the line you had issues with (starting with $token) in your comment. I just tried that entire snippet again in Cloud Shell and it works fine. I deleted my storage and started fresh to make sure it wasn't profile or a configuration and it still works fine.

Are you logging into both Commercial and National Clouds before trying this or multiple accounts? The recommendation for this error is to close any windows or programs (Visual Studio, VSCode, cmd, PowerShell, etc.) that may have tokens connected to Azure and authenticate a single account from scratch. Sometimes you have to flush a cache to do so, as well.

Since the doc is correct, if you continue to have this issue, please open a ticket with Azure Support. Thanks!

@MicrosoftDocs/azure-cxp-triage #please-close

[DCtheGeek]

@MicrosoftDocs/azure-cxp-triage Please remove the 'doc-bug' label and update with 'product-question. Thanks!

[AakashMasand]

Hi I tried running the Powershell snippet again today to do the check and have encountered the same error. I did not check it then, however, on re running it today I have faced the exact same issue.

$azContext = Get-AzContext
$azProfile = [Microsoft.Azure.Commands.Common.Authentication.Abstractions.AzureRmProfileProvider]::Instance.Profile
$profileClient = New-Object -TypeName Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient -ArgumentList ($azProfile)
$token = $profileClient.AcquireAccessToken($azContext.Subscription.TenantId)
$authHeader = @{
'Content-Type'='application/json'
'Authorization'='Bearer ' + $token.AccessToken
}

Define the REST API to communicate with

Use double quotes for $restUri as some endpoints take strings passed in single quotes

$restUri = "https://management.azure.com/subscriptions//providers/Microsoft.PolicyInsights/policyStates/latest/summarize?api-version=2018-04-04"

Invoke the REST API

$response = Invoke-RestMethod -Uri $restUri -Method POST -Headers $authHeader

View the response object (as JSON)

$response

[DCtheGeek]

@AakashMasand I'd recommend opening a support ticket as I'm unable to replicate the issue you are having and it may be related to other variables. Thanks!

[RichShillingtonMSFT]

@AakashMasand Try running Clear-AzContext then connecting to Azure again. If you have more than one Context in cache it will throw this error.