Exchange Online in App-only authentication mode: Error loading objects...

Interesting. A Google search found some entries pointing to a bug on the Microsoft side that seemed to appear at some point.

https://learn.microsoft.com/en-us/answers/questions/1295937/expired-or-invalid-pagination-request-default-expi

Did you already try to update the Exchange Online PowerShell module to the latest 3.6.0?

Feel free to contact support to see if there is a workaround for that in the Exchange Online Connector.

Hello Markus,

Thank you as always update to 3.6.0 solved the issue 

Update on this:
So after updating the Exchange Online Posh module to 3.6.0 the synchronization now works without issues.

But now proces O3E_UnifiedGroup_Update/Deactivate gets frozen:

Set-OneIMUnifiedGroupMembers
Parameters:
-identity 9a7f95c7-c825-4bbf-bd6d-fc1870e72a61
-Mode Modify
-AddItems @(ef175561-bee3-46d2-9e2b-43173c2f16fc)
-RemoveItems @()

2024-10-09 08:55:01.1190 ERROR (ProjectorEngine 073c05b6-cad1-4d74-8af4-760a212fbc76 Job 4545d98a-627a-40f1-9cbb-a2e11e54e406) : Error running synchronization step (UnifiedGroup) of synchronization configuration (Provisioning (Exchange Online Waternet Amsterdam) (Provisioning)). VI.Base.ViException: Error running synchronization step (UnifiedGroup) of synchronization configuration (Provisioning (Exchange Online Waternet Amsterdam) (Provisioning)). ---> VI.Base.ViException: Method (Update (Update)) could not be run successfully. ---> System.AggregateException: One or more errors occurred. ---> System.AggregateException: One or more errors occurred. ---> VI.Base.PowerShell.Runner.PipelineHasErrorsExeption: The following errors occured during execution:
|Microsoft.Exchange.Net.AAD.AADException|We failed to update the group mailbox. Please try again later.
at VI.Base.PowerShell.Runner.RunspaceUtils.Run(Runspace target, IPoshExecutionItem item, Int32 maxDeserDepth)

I will make support call for this.

This is documented here https://support.oneidentity.com/technical-documents/identity-manager/9.2.1/administration-guide-for-connecting-to-exchange-online/2#TOPIC-2201781

NOTE: Adding and editing O3EUnifiedGroups is not possible by app-only authentication. To use these permissions, authentication with a user account is required.

What it your advise in order to support adding/removing members to O3EUnifiedGroups.

Also from the guide:
NOTE: The user account used to access Exchange Online must not use multifactor authentication to allow automated logins in a user context

So when Microsoft enforces the mandatory use of MFA supporting O3EUnifiedGroups using OneIM's OOTB features will not be possible?
And you will need to build your own custom process and script targeting the Microsoft Graph API for supporting O3EUnifiedGroups?

I advise contacting support about that matter. I currently have no further information for the current versions. I know that we will use the Graph API for the O3EUnifiedGroups in future versions.

Can you reveal from which future version Graph will be used?

Niels de Groot 

Have you gotten this after updating to 3.6?

After updating the ExchangeOnlineManagement PS-module to version 3.6.0 I get this error istantly when running a sync:

[1777018] Error running synchronization project (Exchange Online)'s workflow (Initial Synchronization).
[1777292] Error connecting system (Exchange Online Connector)!
[System.Management.Automation.RuntimeException] Could not load type 'Microsoft.IdentityModel.Abstractions.ITelemetryClient' from assembly 'Microsoft.IdentityModel.Abstractions, Version=6.19.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'.
[System.TypeLoadException] Could not load type 'Microsoft.IdentityModel.Abstractions.ITelemetryClient' from assembly 'Microsoft.IdentityModel.Abstractions, Version=6.19.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'.

I'm on Identity Manager version 9.1.1

Niels de Groot 

Have you gotten this after updating to 3.6?

After updating the ExchangeOnlineManagement PS-module to version 3.6.0 I get this error istantly when running a sync:

[1777018] Error running synchronization project (Exchange Online)'s workflow (Initial Synchronization).
[1777292] Error connecting system (Exchange Online Connector)!
[System.Management.Automation.RuntimeException] Could not load type 'Microsoft.IdentityModel.Abstractions.ITelemetryClient' from assembly 'Microsoft.IdentityModel.Abstractions, Version=6.19.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'.
[System.TypeLoadException] Could not load type 'Microsoft.IdentityModel.Abstractions.ITelemetryClient' from assembly 'Microsoft.IdentityModel.Abstractions, Version=6.19.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'.

I'm on Identity Manager version 9.1.1

Did not have this issue, but i'm on 9.2.1
Just a wild shot, maybe try this on the posh module dir: Get-ChildItem -Path $dirPath -Recurse | Unblock-File

Hi Niels de Groot 

We also have requirement to upgrade from current version to 9.2.1 or 9.3 version but before that we need information whether room attribute supports in 9.2.1 version with set-place cmdlet through Exchange PowerShell online connect or not.

As you have moved to version 9.2.1 could you please help on it?

Best regards,
Kirti

Hello kirti pachauri 

It looks like the Set-Place cmdlet is not included in the 9.2.1 and 9.3
Tip: if you read the: https://github.com/OneIdentity/IdentityManager.PoSh-Connector-Guide
The PowerShell connector was originally developed as an abstract base layer for the Exchange connector...
So knowing that you could have a peek inside VI.Projector.ExchangeOnline.Common.dll for study purposes only.
And maybe you could use the XML definition file inside this DDL strip it down and use it at the bases of your custom powershell connector
in order to support Set-Place and/or other cmdlets.
And contact support to be certain, maybe it's coming in release 9.2.2?

Niels de Groot  Thank you so much for your support.