Service Graph Connector for Intune 401 error

[jw9]

Hi,

I have tried to set up the Service Graph Connector for Intune.

The Intune admin set up the application in Intune with Application Permissions and DeviceManagementManagedDevices.Read.All.

I added the Client ID, Client Secret and Token ID (URL) in the OAuth Provider which comes with the integration installed and left everything else as default.

When trying to connect i get the following error: Error: Unable to make a connection to Intune via Graph API call. Please check your credential configuration. Check system log for more details. HTTP return status code was 401

Is this just a question of incorrect client secret or could there be something else I'm missing?

I'm able to retrieve an Oauth token by manually clicking "Get oauth token" in the connection form.

UPDATE: Just requested a new Client Secret and still got the following error:

org.mozilla.javascript.JavaScriptException: Error: Unable to make a connection to Intune via Graph API call. Please check your credential configuration. Check system log for more details.

Actual Error: Request not sent to uri= https://graph.microsoft.com/beta/deviceManagement/managedDevices?filter=deviceType+eq+%27android%27+or+deviceType+eq+%27iPad%27+or+deviceType+eq+%27iPhone%27+or+deviceType+eq+%27androidForWork%27+or+deviceType+eq+%27androidEnterprise%27+or+deviceType+eq+%27nokia%27+or+deviceType+eq+%27windowsPhone%27+or+deviceType+eq+%27blackberry%27+or+deviceType+eq+%27palm%27 : java.net.SocketTimeoutException: connect timed out

[Vini]

Hi Amit,

I got the same issue, did you find a solution?

Regards,

Vinil.

[ctsmith]

I am also having the same issue with same exact error and opened a ticket with HI.  I've set up 3 service graph connectors (Meraki, SCCM, and this InTune) in the last 3 weeks and this one is the only one that's given me trouble.  They are super easy but apparently not this one.  

Interestingly I can use the InTune credentials and generate a new token just fine.  It's just when I test 20 records I get this error.

[ctsmith · Accepted solution]

Looking at this now: https://community.servicenow.com/community?id=community_blog&sys_id=a405ef9bdbbd7018bb4a474d13961903

Might have some tips, especially that InTune permission requirements:

- After registering an application, the following minimum permissions are required for the Graph API to read devices and applications from Intune:

• Read Microsoft Intune Devices        - DeviceManagementManagedDevices.Read.All
• Read Microsoft Intune Applications  - DeviceManagementApps.Read.All

[ctsmith]

Had InTune admin add those minimal permissions and that did the trick.