jholzhey_bu · Technical Administrator, Bruin Support Services · ✭✭✭✭✭

Here is the correct Graph API Permissions for using a single Azure application for both Inbound and Outbound (OAuth):

Forgot something...we were able to do this with only a single Azure API application for both inbound and outbound.

This has finally been resolved! Through a support call and remote session, we finally figured out that the documentation is basically wrong, or at the least, misleading. The permission for mail access needs to be DELEGATE, not Application, as is hinted by the documentation. Very frustrating. But the tech, Davie, is going…

I wondered why I hadn't gotten responses to the other PMs I sent you: <span>You cannot currently message this user, either you do not have permission or the user is not accepting messages.</span>

GET <a href="https://graph.microsoft.com/v1.0/me/mailFolders?%24filter=displayName%20eq%20%27INBOX%27">graph.microsoft.com/.../mailFolders</a> SdkVersion : graph-java/v5.60.0 401 : [...] [Some information was truncated for brevity, enable debug logging for more details] at…

Ah! Is that the problem? <span>Error code: ErrorAccessDenied Error message: Access is denied. Check credentials and try again. GET <a href="https://graph.microsoft.com/v1.0/me/mailFolders?%24filter=displayName%20eq%20%27INBOX%27">graph.microsoft.com/.../mailFolders</a> SdkVersion : graph-java/v5.60.0 403 : [...] [Some…

Outgoing mail is working in Test! But....incoming mail, which worked before switching APIs, now doesn't. Did a re-auth using the new secret, which authenticated fine, but saving the account then resulted error. Deleting the incoming account and re-adding. Of course, I forgot to delete email history, so it'll take a while.…

Just realized we're seeing the exact same on both Prod and Test. Disabled auto-activate simply to avoid the message altogether, but this does give us one more thing to do manually at re-up time. Anyone submit a ticket for it?

Thanks!!! Just had our meeting and worked everything out. I sent him the Admin Guide pdf link, and that's what I'm using now to finish the config. I'll update after we test.

Got a response from support. Basically, I finally RTFM, and it clearly shows that we did it wrong. Meeting tomorrow w/ 365 admin to go over details.

New secret generated, but I have not tested it yet. Our 365 admin had a question about which API we should be using. Your screenshot showed the "Graph" API permission settings. We have only been using the O365 Exchange Online API/Permission. Can I send you a screenshot of what he sent me?

Got it! Thanks! I'll send it over to our 365 admin with the request for a new secret.

That might help! Thanks!

OK, thanks! That gives me hope!

Submitted a ticket yesterday. Support got back to me asking if we had created a new client secret. We didn't, but didn't know that could be an issue. The incoming mail, which uses the same account, using OAuth, is working fine. Waiting on their follow-up to that information. 

Testing has gone fairly well on our test platform...EXCEPT for OAuth for outgoing M365 email. I was under the impression that this was fixed for x.8.4, but apparently not.

Very interesting idea. Thanks!

Fixed!! Thanks to Davie Abgao @ SolarWinds Technical Support. Issue is due to a (soon to be patched) issue of Out of Office/Vacation schedules not getting "NULL'd out" like they're supposed to if the tech is in Vacation Mode during the 12.8.3 HF3 upgrade. To fix immediately, update the dbase directly for the tech having…

To be fair, it's not like they got hacked. Or some sort of hard-coded password issue. Oh, wait...now I understand. Critical hardcoded SolarWinds credential now exploited in the wild

Correction. The issue began the first week of November. I installed HF3 on Nov. 1st.

Yes, flagged tickets not showing up under the Flagged Tickets tab, but it's not affecting all techs. I've founds it's affecting all NEWLY CREATED techs, and so far, only one existing tech (from before install).

Yes, but Samanage (now SWSD) is a completely different product. Nothing at all in common w/ WHD. J. Bryan Holzhey | Technical Administrator | BRUIN Support Services Bellevue University, 1000 Galvin Road South, Bellevue, Nebraska 68005-3098

Yes, but haven't looked in detail. I'm on the Admin side rather than Dev, so was hoping someone could give me tips on what direction to go in. Mainly, I'm trying to find out if it's even possible. I'll look more into the documentation, then talk to Dev to see what they think. J. Bryan Holzhey | Technical Administrator |…

We only just started getting these errors within the past 2 weeks. Every day from 9/26/17 to 9/30/17, then nothing until today, 10/10/17. No major changes have been done. Ver. 12.5.1