Some of the issues you might encounter with your Entra ID integration can easily be fixed.
Error: 400 – Bad Request
This error occurs when one or more of the following fields contains incorrect information:
- Client ID (shown as Application (client) ID in Entra ID)
- Client secret (shown as Value, not Secret ID, in Entra ID)
- Tenant (shown as Directory (tenant) ID in Entra ID)
To correct this error, ensure that you use the credentials provided in the application that you created and you are not using the tenant properties of your Entra ID account. For more information, see Connecting Miradore to Microsoft Entra ID.
Error: 401 – Unauthorized
You might receive an Error: 401 – Unauthorized message while connecting Entra ID to Miradore if one or more of the following fields contains incorrect information:
- Client ID (shown as Application (client) ID in Entra ID)
- Client secret (shown as Value, not Secret ID, in Entra ID)
- Tenant (shown as Directory (tenant) ID in Entra ID)
To correct this error, ensure that you use the credentials provided in the application that you created and you are not using the tenant properties of your Entra ID account. For more information, see Connecting Miradore to Microsoft Entra ID.
Error: 403 – Forbidden
An Error: 403 – Forbidden message can appear during application registration if the configured permission type is not set to Application.
This error can also occur if you do not select Grant admin consent for Default Directory for the User.Read.All and Group.Read.All permissions while defining permissions for your application.
To correct this error, follow the steps in Defining permissions for an application in Azure.
Users are not visible in Miradore
Your Entra ID users might not be visible in Miradore if they have no email address defined in Entra ID. To check if your users have their email address assigned, do the following:
- In Entra ID, navigate to Manage > Users.
- If the Email column is not visible in the table, select Manage view > Edit columns and enable the Email column.
If your users do not have their email address assigned, do the following to update their information:
- Open the user entry and on the Overview tab, select Edit properties at the top.
Note: While the User principal name might look like an email address, it is not sufficient to link the user entry to Miradore. - Navigate to the Contact Information tab and enter the user's email address in the Email field, then select Save.
Insufficient privileges during filter testing
When testing an Entra ID user query filter, you might encounter the error "Insufficient privileges. Please check that all necessary app permissions have been assigned in Entra ID.". To correct this error, check that the Group.Read.All and User.Read.All permissions are granted in Entra ID. If they are missing, add them, then grant admin consent for both.
For more information on granting permissions, see Defining permissions for an application in Azure.
Issues with Workflows when Entra ID is connected
Your Entra ID client secret might have expired if you encounter one or more of the following issues:
- Your Workflows suddently don't work even though they used to.
- You receive an Error: 401 – Unauthorized message during filter testing.
- The Action log shows an error for a workflow.
To resolve this issue, generate a new client secret in Azure as described in Generating a client secret in Azure.