Git-credential-manager-for-windows: Git authentication fails when using a guest account for an Azure AD backed VSTS

[petergerritsen]

After one of my clients migrated their VSTS to a company Azure Subscription (with Azure AD), I'm unable to authenticate with Git with my own company Azure AD account. I've verified my account has access to VSTS by login in to the web interface.

When I perform a 'git fetch', I get the login window to enter my email address. After filling that in, I select my Work/school account and enter the correct password. After that I get a 'Logon failed' in the command prompt and get prompted for credentials.

Here's the git.log which shows the authentication steps:

https://gist.github.com/petergerritsen/b9ee636c06f556bb1e1b6fb8d83ab8d1

I've verified my account is added as a Guest account to my clients AD.

[shiftkey]

@petergerritsen can you test again with v1.14.0? The version you are using is from August, and this might have been fixed already.

I'm not quite familiar with the VSTS flow, but the log file does look like it's got enough details for someone more familiar with the internals to troubleshoot further.

[whoisj]

@petergerritsen a common issue when migrating users from MSA to AAD backed accounts is that the tenant cache file is out of date. Try deleting the files found at %localAppData%\GitCredentialManager\tenant.cache, then re-try authenticating. If it works, then you know the root cause.

Let us know how it goes.

[petergerritsen]

@whoisj Thank you very much, deleting the tenant.cache solved the issue.