SGC-Azure - Authentication failed. The 'Authorization' header is missing.

HetB
Tera Contributor

11 hours ago

Hi,

 

I'm trying to configure the Service Graph Connector for Azure. When I try to test the connection for the my SG-Azure Service Graph Connection I am getting "Error 401 - Authentication failed. The 'Authorization' header is missing."

 

I have confirmed all the following:

User.Read permission on the Microsoft Graph API, Data.Read permission on the Log Analytics API and RBAC assignments.

Not sure why the token isn't being passed or where I can get more details of what it is doing. Tried removing and starting from fresh but I was still getting the Authentication failed. The 'Authorization' header is missing error.

Thanks in advance.

 

0 Helpfuls
  • 82 Views
1 REPLY 1

pratikjagtap
Giga Guru

9 hours ago

Hi @HetB ,

 

A 401 – "Authentication failed. The 'Authorization' header is missing." typically indicates that ServiceNow is not sending a Bearer access token, rather than an issue with Azure RBAC permissions.

Here are the most common causes to check:

  1. Validate the OAuth Profile
    • Ensure the Azure Service Graph Connection is using the correct OAuth 2.0 profile.
    • Verify the Client ID, Client Secret, Tenant ID, and token endpoint.
    • Confirm you can successfully obtain an access token.
  2. Check the Credentials Alias
    • Verify the Service Graph Connection is mapped to the correct Credential Alias.
    • Ensure the alias points to the intended OAuth credential and not a basic authentication credential.
  3. Test Token Generation
    • From the OAuth credential, try generating an access token manually.
    • If no token is generated, the Authorization header will not be added to the request.
  4. Review System Logs
    • Check System Logs → Outbound HTTP Requests or ECC Queue (if using a MID Server) to determine whether the Authorization: Bearer <token> header is present.
    • Also review OAuth Logs for token acquisition failures.
  5. Verify Azure App Registration
    • Confirm the application has the required API permissions and that Admin Consent has been granted.
    • Ensure the client secret has not expired.
  6. Plugin/Version Compatibility
    • Verify you're using the supported version of the Service Graph Connector for Microsoft Azure for your ServiceNow release, as earlier versions had authentication-related issues addressed in later updates.

If the outbound request contains no Authorization header, the issue is almost always that ServiceNow failed to obtain an OAuth access token before making the API call.

To narrow it down further, could you provide:

  • Your ServiceNow release (Washington DC, Xanadu, Yokohama, etc.).
  • Whether you're using OAuth 2.0 Client Credentials or another authentication method.
  • Whether "Get Access Token" succeeds from the OAuth credential.
  • Whether the connection is direct or through a MID Server.

If my response helped, please hit the 👍Thumb Icon and accept the solution so that it benefits future readers.

 

Regards,
Pratik

0 Helpfuls