MS Intune error 2604

I’m getting error 2604 right after pressing “sign in”

Aug 06 12:09:15 zagreus intune-portal[4633]: oneauth{tag="5zt6o"}: (Code:2604) Network infrastructure failure.
Aug 06 12:09:15 zagreus intune-portal[4633]: oneauth{tag="69x1u"}: UI web navigation failed

I suspect it just fails to open my browser tab?

Hi,

Maybe activate xdg.portal.enable = true ?
But I’m not familiar with Intunes.

Having the same issue and I have xdg portal enabled.

25.11.20250814.fbcf476 (Xantusia) with KDE Plasma

Based on the feedback in microsoft-identity-broker: something went wrong [1001] · Issue #401875 · NixOS/nixpkgs · GitHub I hoped this would all now work :frowning:

Hi,
The issue is that microsoft-identity-broker requires some GNOME stuff (at least the keyring) to function. GitHub - recolic/microsoft-intune-archlinux: This is a read-only mirror for https://git.recolic.net/root/microsoft-intune-archlinux.git is some instructions on how to get this working on other DEs than GNOME, but haven’t personally looked into it just yet.

good call, thank you. It’s working so far with gnome (I don’t really care either way, but I’ll probably figure out how to make it behave with kwallet at some point)

I think we should add a warning to the intune module for the time being

@evlli is everything working for you now? If yes, is it possible for you to share the relevant sections of your config here?

I am on nixos-unstable with the latest gnome, and yet I am not able to fully login and register my device using intune-protal. It opens the small window, I can login, but I get some kind of error, which can be sent to the an admin. And intune does not work properly in this case.

I also tried installing intune-protal and microsoft-edge from the stable channel on my system which also did not work, as the small browsing windows for logging in does not render anything at all.

I had a minimal config with just intune, edge and gnome, that worked just fine.

if you’re getting an error, open the journal an look for errors from the ms identity broker. your org has to allow linux devices and most don’t, so that’s probably why it fails. you should connect with your intune / entraid admin and have him look at it from the admin side

Hey @evlli ,

My initial issue was another one though. I somehow missed the nixos service, and was just trying to use the package. It was not working at all. And now, I am facing the issue you mentioned. I’ll contact an admin and see how things go from there. Thanks for tip!