Azure AD Account connection issues.

Dear One Identity Community,

We are having an issue creating users in Azure AD using One Identity Manager (OIM). We are getting frozen jobs like AAD_User_Insert and AAD_User Read.

We have tried the following troubleshooting steps:

  • Made sure that the OIM user account that we are using has the necessary permissions to create users in Azure AD.
  • Made sure that the OIM configuration is correct.

However, the issue persists.

Could you please investigate this issue and provide us with a resolution?    The first error message is from the Sync Editor Logs, and the second code error message is from the job queue.

Synchronization log messages Message context: Type Message Error [1777292] Error connecting system (AzureAD)! [System.Exception] [ServiceException]: Code: generalException - Message: An error occurred sending the request. [MsalServiceException]: Request to the endpoint timed out. [TaskCanceledException]: A task was canceled. [TaskCanceledException]: A task was canceled. [Microsoft.Graph.ServiceException] Code: generalException Message: An error occurred sending the request. [Microsoft.Identity.Client.MsalServiceException] Request to the endpoint timed out. [System.Threading.Tasks.TaskCanceledException] A task was canceled.
a

ErrorMessages	(2023-09-21 13:44:15.613) [1777018] Error running synchronization project (Azure Active Directory tenant 'XXXXXXXX')'s workflow (Provisioning).
[1777292] Error connecting system (AzureAD)!
[System.Exception] [ServiceException]: Code: generalException - Message: An error occurred sending the request.
[MsalServiceException]: Request to the endpoint timed out.
[TaskCanceledException]: A task was canceled.
[TaskCanceledException]: A task was canceled.

 

[Microsoft.Graph.ServiceException] Code: generalException
Message: An error occurred sending the request.

 

[Microsoft.Identity.Client.MsalServiceException] Request to the endpoint timed out.
[System.Threading.Tasks.TaskCanceledException] A task was canceled.
   at VI.Projector.JobComponent.ProjectorComponent._AdHocProjection()
   at VI.Projector.Database.ProjectorExecutor.Project(ISession session, IProjectionConfiguration configuration, ProjectionOption options, ISystemObject adHocObject, CancellationToken cancellationToken)
   at VI.Projector.Projection.Extensions.Execute(IProjectorEngine engine, IProjectionConfiguration configuration, ProjectionOption options, ISystemObject adHocObject, CancellationToken cancellationToken)
   at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
   ---- Start of Inner Exception ----
   at VI.Projector.Projection.ProjectorEngine.<ExecuteAsync>d__3.MoveNext()
   ---- Start of Inner Exception ----
   at VI.Projector.Projection.ProjectorEngine.<ExecuteAsync>d__3.MoveNext()
   at VI.Projector.Connection.SystemConnection.Resolve[T](Boolean throwIfNotSupported)
   at VI.Projector.Connection.SystemConnection.ConnectIfRequired(Boolean doNotSetSchema)
   ---- Start of Inner Exception ----
   at VI.Projector.Connection.SystemConnection.ConnectIfRequired(Boolean doNotSetSchema)
   at VI.Projector.Connection.Connectors.BottleNeckConnector.OnConnect(ISystemConnectionParameterCollection connectionParameter)
   at VI.Projector.Connection.Connectors.BottleNeckConnector._Redirect[T](Func`1 redirection)
   at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
   ---- Start of Inner Exception ----
   at VI.Projector.Connection.Connectors.BottleNeckConnectorTask.Execute()
   at VI.Projector.Connection.Connectors.BottleNeckConnector.<>c__DisplayClass1_0.<OnConnect>b__0()
   at VI.Projector.Connection.SystemConnector.Connect(ISystemConnectionParameterCollection connectionParameter)
   at VI.Projector.MicrosoftGraph.MicrosoftGraphConnector.OnConnect(ISystemConnectionParameterCollection connectionParameter)
   at VI.Projector.MicrosoftGraph.GraphConnectionContext..ctor(ISystemConnectionParameterCollection connectionParameter, LogSession log)
   ---- Start of Inner Exception ----
   at VI.Projector.MicrosoftGraph.GraphConnectionContext..ctor(ISystemConnectionParameterCollection connectionParameter, LogSession log)
   at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
   ---- Start of Inner Exception ----
   at Microsoft.Graph.GraphServiceOrganizationCollectionRequest.<GetAsync>d__3.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Graph.BaseRequest.<SendAsync>d__34`1.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Graph.BaseRequest.<SendRequestAsync>d__40.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Graph.HttpProvider.<SendAsync>d__18.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Graph.HttpProvider.<SendRequestAsync>d__19.MoveNext()
   ---- Start of Inner Exception ----
   at Microsoft.Graph.HttpProvider.<SendRequestAsync>d__19.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Identity.Client.ApiConfig.Executors.ConfidentialClientExecutor.<ExecuteAsync>d__3.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Identity.Client.Internal.Requests.RequestBase.<RunAsync>d__12.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Identity.Client.Internal.Requests.ClientCredentialRequest.<ExecuteAsync>d__2.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Identity.Client.Internal.Requests.RequestBase.<HandleTokenRefreshErrorAsync>d__25.MoveNext()
   ---- Start of Inner Exception ----
   at Microsoft.Identity.Client.Http.HttpManager.<ExecuteWithRetryAsync>d__12.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
   at Microsoft.Identity.Client.Http.HttpManager.<ExecuteAsync>d__14.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
Synchronization ended with errors.
You can find more detailed information in the log from Donnerstag, 21. September 2023.

Also we have the Error existing in sync editor when we try to access only (Other schema types working fine)users parameters  in the target system:

An error occurs when loading the Azure Active Directory user accounts: [Exception]: ServiceException occured Code: BadRequest Message: Tenant does not have a SPO license. [ServiceException]: Code: BadRequest - Message: Tenant does not have a SPO license.

Issue only with User Attributes in the Target system(Azure AD)

Thank you for your time and assistance

Thanks and Regards,

Badhri