diff --git a/src/deployment/registration.py b/src/deployment/registration.py
index ed0d70a872..05d6fc9732 100644
--- a/src/deployment/registration.py
+++ b/src/deployment/registration.py
@@ -14,6 +14,7 @@
 
 import adal  # type: ignore
 import requests
+from azure.cli.core.azclierror import AuthenticationError
 from azure.common.client_factory import get_client_from_cli_profile
 from azure.common.credentials import get_cli_profile
 from azure.graphrbac import GraphRbacManagementClient
@@ -318,7 +319,7 @@ def add_application_password_impl(
             body=password_request,
         )
         return (str(key), password["secretText"])
-    except adal.AdalError:
+    except AuthenticationError:
         return add_application_password_legacy(app_object_id, subscription_id)
 
 
@@ -376,7 +377,7 @@ def authorize_application(
                 }
             },
         )
-    except adal.AdalError:
+    except AuthenticationError:
         logger.warning("*** Browse to: %s", FIX_URL % onefuzz_app_id)
         logger.warning("*** Then add the client application %s", registration_app_id)
 
@@ -543,7 +544,7 @@ def assign_app_role(
                     "appRoleId": managed_node_role["id"],
                 },
             )
-    except adal.AdalError:
+    except AuthenticationError:
         assign_app_role_manually(
             onefuzz_instance_name, application_name, subscription_id, app_role
         )