Forum Discussion
Authentication issues
Hi,
I am currently testing some features of the Graph to incorporate in an application that we plan to develop. When I use the authentication example (https://techcommunity.microsoft.com/t5/Using-Microsoft-Graph-Security/Sample-Microsoft-Graph-Authentication-App/m-p/186474#M3) and try to login via application-only authorisation, I get the following error:
"error": {
"code": "UnknownError",
"message": "{"@odata.context":"https://isg-prod-eu.trafficmanager.net/security/$metadata#Edm.String","value":"Auth token is not for ISG audience. Please see document at https://techcommunity.microsoft.com/t5/Using-Microsoft-Graph-Security/Authorization-and-Microsoft-Graph-Security-API/m-p/184376"}",
"innerError": {
"request-id": "1eec7100-745d-44e3-bcac-fdf631476f2d",
"date": "2018-05-15T08:55:28"
}
}
}
Does anyone have an idea what is going wrong? Thanks.
Peter,
One approach would be to request Delegated permissions for Graph SharePoint API calls and App Only permissions for Graph Security API calls. Your application would essentially be acting as a service when it retrieves security alerts, and using the user account your created when writing those alerts to the SharePoint list.
Without knowing how your application is invoked I don't know if this option is feasible for you. It doesn't sound like the app is an interactive app since you've created a user which sounds like it's acting like a service account and reading and writing alerts. App Only seems like a viable option. Just make sure if the application is interactive, that it doesn't let regular users view security alerts when they otherwise wouldn't be able to.
9 Replies
- Jeremy Dallman
Microsoft
Jeroen Niesen, we are aware of this issue, have filed a bug with the team, and are actively investigating the cause.
Jeremy Dallman thanks for your reply. Do you have a rough estimation when the bug will be fixed?
- Jeremy Dallman
Jeroen, we have resolved an issue with the Security API traffic manager that affected multiple customers ability to query for their Alerts. Please confirm you are seeing Alerts now.
Thanks for notifying us of the issue and thanks for participating in our Public Preview. Please let us know if you encounter this or other issues in the future.
