Why Connect-MsGraph gives a connection ERROR after selecting the account in the browser, SSL Error

[ReySys]

Yes, security issue. How to fix it?

Azure portal login works fine or any other website.

Connect-MgGraph -Debug
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ User.Read ] ParentRequestId:
DEBUG: Executing interactive authentication workflow inline.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] MSAL MSAL.NetCore with assembly version '4.61.3.0'. CorrelationId(4c2bc0a5-3150-43af-ae02-441d1939f96e)
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] === InteractiveParameters Data ===
LoginHint provided: False
User provided: False
UseEmbeddedWebView: NotSpecified
ExtraScopesToConsent:
Prompt: select_account
HasCustomWebUi: False
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e]
=== Request Data ===
Authority Provided? - True
Scopes - User.Read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenInteractive
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 4c2bc0a5-3150-43af-ae02-441d1939f96e
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] === Token Acquisition (InteractiveRequest) started:
Scopes: User.Read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:34Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] Fetching instance discovery from the network from host login.microsoftonline.com.
DEBUG: Request [29400d99-3711-4b6a-a72c-8194e6d46ded] GET https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=REDACTED
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-OS:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
x-ms-client-request-id:29400d99-3711-4b6a-a72c-8194e6d46ded
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.11.4 (.NET 8.0.8; Microsoft Windows 10.0.26120)
client assembly: Azure.Identity
DEBUG: Response [29400d99-3711-4b6a-a72c-8194e6d46ded] 200 OK (00.2s)
Cache-Control:max-age=86400, private
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
Access-Control-Allow-Origin:REDACTED
Access-Control-Allow-Methods:REDACTED
P3P:REDACTED
client-request-id:REDACTED
x-ms-request-id:9d1a0e6f-9268-42e4-8806-21c4a3453a00
x-ms-ests-server:REDACTED
x-ms-httpver:REDACTED
x-ms-srs:REDACTED
X-XSS-Protection:REDACTED
Set-Cookie:REDACTED
Date:Thu, 22 Aug 2024 14:43:32 GMT
Content-Type:application/json; charset=utf-8
Content-Length:950

DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:35Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] Authority validation enabled? True.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:35Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] Authority validation - is known env? True.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:35Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] Using system browser.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 14:43:35Z - 4c2bc0a5-3150-43af-ae02-441d1939f96e] Listening for authorization code on http://localhost:64548/

Refresh - same screen
Diagnose go to internet connection, who is fine

Get-InstalledModule

Version Name Repository Description

---

3.5.0 ExchangeOnlineManagement PSGallery This is a General Availability (GA) rele…
2.22.0 Microsoft.Graph PSGallery Microsoft Graph PowerShell module
2.22.0 Microsoft.Graph.Applications PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Authentication PSGallery Microsoft Graph PowerShell Authenticatio…
2.22.0 Microsoft.Graph.Bookings PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Calendar PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.ChangeNotifications PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.CloudCommunications PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Compliance PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.CrossDeviceExperie… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.DeviceManagement PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.DeviceManagement.A… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.DeviceManagement.A… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.DeviceManagement.E… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.DeviceManagement.F… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Devices.CloudPrint PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Devices.CorporateM… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Devices.ServiceAnn… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.DirectoryObjects PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Education PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Files PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Groups PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Identity.Directory… PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Identity.Governance PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Identity.Partner PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Identity.SignIns PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Mail PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Notes PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.People PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.PersonalContacts PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Planner PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Reports PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.SchemaExtensions PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Search PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Security PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Sites PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Teams PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Users PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Users.Actions PSGallery Microsoft Graph PowerShell Cmdlets
2.22.0 Microsoft.Graph.Users.Functions PSGallery Microsoft Graph PowerShell Cmdlets

$PSVersiontable

Name Value

---

PSVersion 7.4.5
PSEdition Core
GitCommitId 7.4.5
OS Microsoft Windows 10.0.26120
Platform Win32NT
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0, 5.0, 5.1, 6.0, 7.0}
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
WSManStackVersion 3.0

But same error with version 7.4.4

Windows 11 Machine

[ReySys]

After checking the Edge version was the problem, I was using a Beta version.

=== Request Data ===
Authority Provided? - True
Scopes - User.Read
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - False
HomeAccountId - False
CorrelationId - 1e711772-a2c3-4d5c-a251-53d731d82xxx
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:15Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4] === Token Acquisition (SilentRequest) started:
Scopes: User.Read
Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:16Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:16Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4] Access token is not expired. Returning the found cache entry. [Current time (08/22/2024 17:56:16) - Expiration Time (08/22/2024 19:04:19 +00:00) - Extended Expiration Time (08/22/2024 19:04:19 +00:00)]
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:16Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4] Returning access token found in cache. RefreshOn exists ? False
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:16Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:16Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4]
=== Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.NetCore .NET 8.0.8 Microsoft Windows 10.0.26120 [2024-08-22 17:56:16Z - 1e711772-a2c3-4d5c-a251-53d731d82cf4] AT expiration time: 8/22/2024 7:04:19 PM +00:00, scopes: Device.Read.All email Group.ReadWrite.All openid profile User.Read User.Read.All. source: Cache
DEBUG: InteractiveBrowserCredential.GetToken succeeded. Scopes: [ User.Read ] ParentRequestId: ExpiresOn: 2024-08-22T19:04:19.0000000+00:00
Welcome to Microsoft Graph!

Connected via delegated access using 14d82eec-204b-4c2f-b7e8-296a70dab6xx
Readme: https://aka.ms/graph/sdk/powershell
SDK Docs: https://aka.ms/graph/sdk/powershell/docs
API Docs: https://aka.ms/graph/docs

NOTE: You can use the -NoWelcome parameter to suppress this message.

Preview Microsoft Edge releases early, settings. Set to disabled and restart, probably need to close all edge sessions. Or restart your device.