SOLVED

SharePoint Hybrid configuration wizard issue

%3CLINGO-SUB%20id%3D%22lingo-sub-1198222%22%20slang%3D%22en-US%22%3ESharePoint%20Hybrid%20configuration%20wizard%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1198222%22%20slang%3D%22en-US%22%3E%3CP%3ESharePoint%20Hybrid%20configuration%20wizard%20has%20stopped%20working%20for%20more%20than%20a%20week%20now.%20When%20launched%20and%20selected%20any%20workload%20for%20hybrid%2C%20it%20throws%20error%20as%20%22The%20remote%20server%20returned%20an%20error%20(403)%20Forbidden%22.%20Existing%20hybrid%20connections%20works%20fine%20but%20because%20of%20this%20issue%2C%20configuring%20new%20hybrid%20set%20up%20for%20any%20workload%20is%20not%20possible.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EError%20log%20-%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E2020.02.24%2012%3A56%3A13.465%20%5BClient%3DUX%2C%20Page%3DSharePointWelcome%5D%20START%20via%20Next%3CBR%20%2F%3E2020.02.24%2012%3A56%3A15.172%20%5BClient%3DUX%2C%20Page%3DSharePointWelcome%5D%20FINISH%20Time%3D1707.0ms%3CBR%20%2F%3E2020.02.24%2012%3A56%3A15.213%20%5BClient%3DUX%2C%20Page%3DSharePointADAL%5D%20START%20via%20Next%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.581%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.590%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Resolving%20DNS%20for%20SP2013...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.595%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20SP2013%20resolved%20as%3A%20fe80%3A%3Adc3f%3A2db8%3Ab89e%3Ad480%2512%2C%2010.0.0.4%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.597%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Checking%20port%205985%20on%20host%20SP2013...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.603%20%5BActivity%3DTenant%20Connection%20Validation%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.606%20%5BActivity%3DTenant%20Connection%20Validation%5D%20Resolving%20DNS%20for%20SP2013...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.607%20%5BActivity%3DTenant%20Connection%20Validation%5D%20SP2013%20resolved%20as%3A%20fe80%3A%3Adc3f%3A2db8%3Ab89e%3Ad480%2512%2C%2010.0.0.4%3CBR%20%2F%3E2020.02.24%2012%3A56%3A23.607%20%5BActivity%3DTenant%20Connection%20Validation%5D%20Checking%20port%205985%20on%20host%20SP2013...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A26.145%20WARNING%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20No%20connection%20could%20be%20made%20because%20the%20target%20machine%20actively%20refused%20it%2010.0.0.4%3A5985%3CBR%20%2F%3E2020.02.24%2012%3A56%3A26.145%20WARNING%20%5BActivity%3DTenant%20Connection%20Validation%5D%20No%20connection%20could%20be%20made%20because%20the%20target%20machine%20actively%20refused%20it%2010.0.0.4%3A5985%3CBR%20%2F%3E2020.02.24%2012%3A56%3A26.147%20%5BActivity%3DTenant%20Connection%20Validation%5D%20Checking%20HTTP%2FS%20connect%20on%20host%20SP2013%3A5985...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A26.157%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Checking%20HTTP%2FS%20connect%20on%20host%20SP2013%3A5985...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A26.187%20%5BHTTP%20GET%3Dhttp%3A%2F%2Fsp2013%2F%5D%20Request%20for%20http%3A%2F%2Fsp2013%2F%20does%20NOT%20go%20thru%20proxy%3CBR%20%2F%3E2020.02.24%2012%3A56%3A26.190%20%5BHTTP%20GET%3Dhttp%3A%2F%2Fsp2013%2F%5D%20Request%20for%20http%3A%2F%2Fsp2013%2F%20does%20NOT%20go%20thru%20proxy%3CBR%20%2F%3E2020.02.24%2012%3A56%3A34.434%20WARNING%20%5BActivity%3DTenant%20Connection%20Validation%5D%20The%20remote%20server%20returned%20an%20error%3A%20(401)%20Unauthorized.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A34.435%20%5BActivity%3DTenant%20Connection%20Validation%5D%20Validating%20tenant%20credential...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A34.561%20WARNING%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20The%20remote%20server%20returned%20an%20error%3A%20(401)%20Unauthorized.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A34.578%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Connecting%20to%20http%3A%2F%2Fsp2013%3A5985%2Fwsman...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A35.693%20%5BActivity%3DOnPremises%20Connection%20Validation%2C%20Provider%3DSharePointPowerShellProvider%5D%20Adding%20PSSnapIn%20Microsoft.SharePoint.PowerShell%3CBR%20%2F%3E2020.02.24%2012%3A56%3A37.240%20%5BActivity%3DOnPremises%20Connection%20Validation%2C%20Provider%3DSharePointPowerShellProvider%5D%20Opening%20Runspace.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A37.865%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Connected%20in%203311ms%3CBR%20%2F%3E2020.02.24%2012%3A56%3A38.301%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Getting%20configuration%20data...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A38.318%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20Data%20retrieved%3CBR%20%2F%3E2020.02.24%2012%3A56%3A38.318%20%5BActivity%3DOnPremises%20Connection%20Validation%5D%20FINISH%20Time%3D14.7s%3CBR%20%2F%3E2020.02.24%2012%3A56%3A38.318%20%5BActivity%3DOnPremises%20Connection%20Validation%2C%20Provider%3DSharePointPowerShellProvider%5D%20Disposing%20Runspace.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A46.202%20%5BActivity%3DStart%20to%20validate%20Tenant%20credential%5D%20Got%20access%20token%20using%20the%20current%20tenant%20account%20credential.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A46.205%20%5BActivity%3DStart%20to%20validate%20Tenant%20credential%5D%20The%20current%20user%20is%20a%20Prod%20user.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A46.383%20%5BActivity%3DStart%20to%20validate%20Tenant%20credential%5D%20Got%20user%20membership%20information.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A46.384%20%5BActivity%3DTenant%20Connection%20Validation%5D%20Validating%20tenant%20credential%20complete%3CBR%20%2F%3E2020.02.24%2012%3A56%3A46.384%20%5BActivity%3DTenant%20Connection%20Validation%5D%20FINISH%20Time%3D22.8s%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.546%20%5BClient%3DUX%2C%20Page%3DSharePointADAL%5D%20FINISH%20Time%3D33.3s%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.569%20%5BClient%3DUX%2C%20Page%3DSharePointOnPremisesDetection%5D%20START%20via%20Next%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.572%20%5BActivity%3DDetection%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.578%20%5BActivity%3DDetection%5D%20Connecting%20to%20http%3A%2F%2Fsp2013%3A5985%2Fwsman...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.579%20%5BActivity%3DDetection%2C%20Provider%3DSharePointPowerShellProvider%5D%20Adding%20PSSnapIn%20Microsoft.SharePoint.PowerShell%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.614%20%5BActivity%3DDetection%2C%20Provider%3DSharePointPowerShellProvider%5D%20Opening%20Runspace.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.814%20%5BActivity%3DDetection%5D%20Connected%20in%20236ms%3CBR%20%2F%3E2020.02.24%2012%3A56%3A48.815%20%5BActivity%3DDetection%5D%20Getting%20configuration%20data...%3CBR%20%2F%3E2020.02.24%2012%3A56%3A52.993%20%5BActivity%3DDetection%5D%20Start%20to%20scan%20SharePoint%20content%20databases%20and%20acquire%20all%20PHA%20instances.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A53.130%20%5BActivity%3DDetection%5D%20Data%20retrieved%3CBR%20%2F%3E2020.02.24%2012%3A56%3A53.130%20%5BActivity%3DDetection%5D%20FINISH%20Time%3D4558.0ms%3CBR%20%2F%3E2020.02.24%2012%3A56%3A53.132%20%5BActivity%3DDetection%2C%20Provider%3DSharePointPowerShellProvider%5D%20Disposing%20Runspace.%3CBR%20%2F%3E2020.02.24%2012%3A56%3A54.262%20%5BClient%3DUX%2C%20Page%3DSharePointOnPremisesDetection%5D%20FINISH%20Time%3D5693.0ms%3CBR%20%2F%3E2020.02.24%2012%3A56%3A54.274%20%5BClient%3DUX%2C%20Page%3DSharePointFeaturesController%5D%20START%20via%20Next%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.442%20%5BClient%3DUX%2C%20Page%3DSharePointFeaturesController%5D%20FINISH%20Time%3D22.2s%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.458%20%5BClient%3DUX%2C%20Page%3DSharePointConfiguring%5D%20START%20via%20Next%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.470%20%5BProvider%3DSharePointPowerShellProvider%5D%20Adding%20PSSnapIn%20Microsoft.SharePoint.PowerShell%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.508%20%5BProvider%3DSharePointPowerShellProvider%5D%20Opening%20Runspace.%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.768%20%5BWorkflow%3DHybrid%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.784%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.786%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DCheckPrerequisites%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.786%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DCheckPrerequisites%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.787%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DCheckConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.787%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DCheckConfiguration%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.788%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.789%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20Configuring%20Oauth%20authentication%20between%20SharePoint%20OnPrem%20and%20SharePoint%20Online.%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.915%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20Got%20the%20Access%20token%20from%20Azure%20Active%20Directory%20Access%20Control%20Services%20to%20Authenticate%20into%20Hybrid%20Service%3CBR%20%2F%3E2020.02.24%2012%3A57%3A16.940%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20Got%20the%20valid%20On-premises%20authorization%20certificate%20which%20will%20be%20uploaded%20to%20Azure%20Active%20Directory%20Access%20Control%20Services%20(ACS)%3CBR%20%2F%3E2020.02.24%2012%3A57%3A17.028%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20Calling%20into%20Azure%20Active%20Directory%20Services%20to%20register%20external%20On-premises%20SharePoint%20HTTP%20endpoints%20and%20upload%20authorization%20certificate%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.522%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20Azure%20Active%20Directory%20Service%20call%20(Graph%20API)%20was%20successful.%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.522%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DConfigure%5D%20FINISH%20Time%3D1733.4ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.523%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DValidateConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.523%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%2C%20Phase%3DValidateConfiguration%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.523%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnlineConfiguration%5D%20FINISH%20Time%3D1738.4ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.524%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.525%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DCheckPrerequisites%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.525%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DCheckPrerequisites%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.526%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DCheckConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.526%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DCheckConfiguration%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.526%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DConfigure%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.527%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DConfigure%5D%20Acquiring%20tenant%20information%20using%20Discovery%20Service%20REST%20API.%3CBR%20%2F%3E2020.02.24%2012%3A57%3A18.665%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DConfigure%5D%20Got%20the%20Access%20token%20from%20Azure%20Active%20Directory%20Access%20Control%20Services%20to%20Authenticate%20into%20Discovery%20Service%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.056%20*ERROR*%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DConfigure%5D%20System.Net.WebException%3A%20The%20remote%20server%20returned%20an%20error%3A%20(403)%20Forbidden.%3CBR%20%2F%3Eat%20System.Net.HttpWebRequest.GetResponse()%3CBR%20%2F%3Eat%20Microsoft.Online.CSE.HybridSP.StandardWorkflow.GetTenantInformationTask.GetTenantInformation(IOAuthToken%20authToken)%3CBR%20%2F%3Eat%20Microsoft.Online.CSE.HybridSP.StandardWorkflow.GetTenantInformationTask.Configure()%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.057%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DConfigure%5D%20FINISH%20Time%3D531.3ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.057%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DValidateConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.057%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DValidateConfiguration%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.058%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%5D%20FINISH%20Time%3D535.3ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.058%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnPremConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.058%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnPremConfiguration%2C%20Phase%3DCheckPrerequisites%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.058%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnPremConfiguration%2C%20Phase%3DCheckPrerequisites%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.058%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnPremConfiguration%2C%20Phase%3DCheckConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.059%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnPremConfiguration%2C%20Phase%3DCheckConfiguration%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.059%20%5BWorkflow%3DHybrid%2C%20Task%3DOAuthOnPremConfiguration%5D%20FINISH%20Time%3D1.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.059%20%5BWorkflow%3DHybrid%2C%20Task%3DTaxonomyConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.059%20%5BWorkflow%3DHybrid%2C%20Task%3DTaxonomyConfiguration%2C%20Phase%3DCheckPrerequisites%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.059%20%5BWorkflow%3DHybrid%2C%20Task%3DTaxonomyConfiguration%2C%20Phase%3DCheckPrerequisites%5D%20FINISH%20Time%3D0.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.059%20%5BWorkflow%3DHybrid%2C%20Task%3DTaxonomyConfiguration%2C%20Phase%3DCheckConfiguration%5D%20START%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.060%20%5BWorkflow%3DHybrid%2C%20Task%3DTaxonomyConfiguration%2C%20Phase%3DCheckConfiguration%5D%20FINISH%20Time%3D1.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.060%20%5BWorkflow%3DHybrid%2C%20Task%3DTaxonomyConfiguration%5D%20FINISH%20Time%3D1.0ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.060%20%5BWorkflow%3DHybrid%5D%20FINISH%20Time%3D2291.7ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.061%20%5BProvider%3DSharePointPowerShellProvider%5D%20Disposing%20Runspace.%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.109%20%5BClient%3DUX%2C%20Page%3DSharePointConfiguring%5D%20FINISH%20Time%3D2651.2ms%3CBR%20%2F%3E2020.02.24%2012%3A57%3A19.110%20%5BClient%3DUX%2C%20Page%3DConfigurationSummary%5D%20START%20via%20Next%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1198222%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EHybrid%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1199984%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%20Hybrid%20configuration%20wizard%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1199984%22%20slang%3D%22en-US%22%3EI%20am%20also%20able%20to%20repro%20and%20getting%20the%20same%20message%20above%2C%20%3CBR%20%2F%3E%3CBR%20%2F%3EIn%20logs%20we%20see%3CBR%20%2F%3E2020.02.28%2006%3A09%3A19.056%20*ERROR*%20%5BWorkflow%3DHybrid%2C%20Task%3DGetTenantInformation%2C%20Phase%3DConfigure%5D%20System.Net.WebException%3A%20The%20remote%20server%20returned%20an%20error%3A%20(403)%20Forbidden.%3CBR%20%2F%3E%20at%20System.Net.HttpWebRequest.GetResponse()%3CBR%20%2F%3E%20at%20Microsoft.Online.CSE.HybridSP.StandardWorkflow.GetTenantInformationTask.GetTenantInformation(IOAuthToken%20authToken)%3CBR%20%2F%3E%20at%20Microsoft.Online.CSE.HybridSP.StandardWorkflow.GetTenantInformationTask.Configure()%3CBR%20%2F%3EIn%20Fiddler%20trace%20we%20have%20a%20call%20to%20GET%20%3CA%20href%3D%22https%3A%2F%2Fapi.office.com%2Fdiscovery%2Fv1.0%2Fme%2Fservices%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fapi.office.com%2Fdiscovery%2Fv1.0%2Fme%2Fservices%3C%2FA%3E%20HTTP%2F1.1%3CBR%20%2F%3Ewith%20response%3CBR%20%2F%3E%7B%22error%22%3A%7B%22code%22%3A%22101%2C%20Microsoft.Online.Services.O365Discovery.O365DiscoveryException%22%2C%22message%22%3A%22The%20app%20ID%20is%20blocked%20for%20access%20of%20the%20O365%20Discovery%20Service.%22%7D%7D%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20have%20this%20issue%20reported%20to%20the%20PG%20team%20and%20should%20be%20seeing%20this%20fixed%20soon.%3CBR%20%2F%3E%3CBR%20%2F%3EThank%20you%20for%20your%20patience%20!%20%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%3CBR%20%2F%3EPaul%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1206206%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%20Hybrid%20configuration%20wizard%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1206206%22%20slang%3D%22en-US%22%3E%3CP%3EProduct%20group%20team%20resolved%20the%20issue%20by%20replacing%20the%20decommissioned%20API%20with%20one%20from%20MS%20Graph.%26nbsp%3BWe%20received%20an%20un-official%20build%20of%20Hybrid%20picker%20that%20worked%20fine%20for%20us.%20I%20think%20the%20final%20version%20will%20be%20released%20after%20thorough%20testing.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

SharePoint Hybrid configuration wizard has stopped working for more than a week now. When launched and selected any workload for hybrid, it throws error as "The remote server returned an error (403) Forbidden". Existing hybrid connections works fine but because of this issue, configuring new hybrid set up for any workload is not possible.

 

Saurabh7019_0-1582808474155.png

 

2 Replies
I am also able to repro and getting the same message above,

In logs we see
2020.02.28 06:09:19.056 *ERROR* [Workflow=Hybrid, Task=GetTenantInformation, Phase=Configure] System.Net.WebException: The remote server returned an error: (403) Forbidden.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.Online.CSE.HybridSP.StandardWorkflow.GetTenantInformationTask.GetTenantInformation(IOAuthToken authToken)
at Microsoft.Online.CSE.HybridSP.StandardWorkflow.GetTenantInformationTask.Configure()
In Fiddler trace we have a call to GET https://api.office.com/discovery/v1.0/me/services HTTP/1.1
with response
{"error":{"code":"101, Microsoft.Online.Services.O365Discovery.O365DiscoveryException","message":"The app ID is blocked for access of the O365 Discovery Service."}}


We have this issue reported to the PG team and should be seeing this fixed soon.

Thank you for your patience !

Regards
Paul
Best Response confirmed by Paul Prashanth A (Microsoft)
Solution

Product group team resolved the issue by replacing the decommissioned API with one from MS Graph. We received an un-official build of Hybrid picker that worked fine for us. I think the final version will be released after thorough testing.