unauthorized_client — Unauthorized client

The Azure AD app is not authorized to use the requested grant type. For example, maybe a client trying to use resource owner password or another disallowed flow. Make sure you're using the standard authorization code flow with Riposte. If this error appears, verify your Azure AD app's settings allow the type of flow or permission you're attempting. Adjust the app registration or use a supported flow, then reinitiate auth.