Low severityauthentication
Power BI Error:
AADSTS70007
What does this error mean?
The app sent a response_mode value that Microsoft Entra ID (Azure AD) does not support for the requested flow.
Common causes
- 1response_mode set to a value Entra ID doesn't recognize (typo, custom value, or unsupported keyword)
- 2Mismatch between response_type and response_mode — e.g. response_type=code with response_mode=fragment, or response_type=id_token with response_mode=query
- 3form_post used in a flow or against an endpoint that doesn't support it (e.g. the v2.0 device code or certain native client flows)
- 4Hard-coded response_mode in a custom auth library or middleware that wasn't updated when the OAuth flow was changed (auth code → PKCE, implicit → code+PKCE)
- 5Embedded Power BI / custom connector code passing response_mode explicitly when MSAL would otherwise choose the correct default
How to fix it
- 1Capture the failing /authorize request URL (browser network tab or Fiddler) and inspect the literal response_mode and response_type values being sent.
- 2Match response_mode to response_type: use 'query' for response_type=code, 'fragment' for response_type=id_token or token, and 'form_post' only when explicitly required and supported by your endpoint.
- 3If you don't have a strict reason to set it, remove the response_mode parameter entirely — Entra ID will default to the correct mode for the flow.
- 4If the call originates from a library (MSAL.js, MSAL.NET, ADAL, a Power BI custom connector, or a Data Factory linked service), upgrade to the latest MSAL version and stop passing response_mode manually; legacy ADAL hard-codes can trigger this.
- 5Re-test against both the v1.0 and v2.0 endpoints if you recently migrated — some response_mode values valid on v1.0 (login.microsoftonline.com/common/oauth2/authorize) behave differently on v2.0 (/oauth2/v2.0/authorize).