Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fn_microsoft_security_graph unable to connect to gov cloud #66

Open
LiamMahoney opened this issue Feb 24, 2021 · 0 comments
Open

fn_microsoft_security_graph unable to connect to gov cloud #66

LiamMahoney opened this issue Feb 24, 2021 · 0 comments

Comments

@LiamMahoney
Copy link

Description

In the fn_microsoft_security_graph the URL that defines the scope used to request permissions is hardcoded as https://graph.microsoft.com/.default, which doesn't work for GCC High (gov cloud) connections.

After running the integration in my debugger I found the get_alerts function was recieveing the following response:

{\r\n  "error": {\r\n    "code": "InvalidAuthenticationToken",\r\n    "message": "Access token validation failure. Invalid audience.",\r\n    "innerError": {\r\n      "date": "2021-02-24T16:09:01",\r\n      "request-id": "xxx",\r\n      "client-request-id": "xxx"\r\n    }\r\n  }\r\n}

Setting scope to https://graph.microsoft.us/.default appears to fix the problem.

Describe How to Reproduce

Configure the integration to communicate with GCC High.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant