Whenever I try to create a user from Azure AD spoke. I get this error: " Forbidden Request. Please Check Oauth Token and scope permission."

[Roy13]

Hello, 

I followed this (https://youtu.be/JOUBcINNF9g) tutorial to setup my Azure AD spoke. but whenever I try to push a user from ServiceNow to Azure Ad it gives me the following error: "Forbidden Request. Please Check Oauth Token and scope permission."

Everything that I have created is in the Microsoft Azure AD spoke Scope. And my Oauth token is also valid has anyone else encountered this error before? 

[AdrianHolm]

Hello,

Have you figured the issue in this case? If yes, what did you do? I'm kinda in the same situation with the exact same Error. 

Best regards,
Adrian H.

[Roy13]

Hey Adrian, I did figure it out.

My issue was that it was somehow trying to connect to my Personal Azure AD account. What is did was I opened ServiceNow in incognito and when I refreshed the Azure AD connection it prompted me to enter my credentials after which it started working. 

Other possibilities:

1) The other possibility is that you might not have given Admin rights to the ServiceNow app in Azure AD. 

2) Lastly, just have a look at the Oauth token and make sure it is not expired. 

[AdrianHolm]

Hi Roy,

Sorry for really late response, but by nr. 1 'admin rights' you mean grant admin consent under API permissions, right?

Other than that I've followed the video step-by-step, but still get forbidden username/password. 

Best regards,
Adrian H.

[Sravani36]

Hi Facing the same error could you please tell the solution for it.