Problem validating API Credentials with Microsoft Exchange Online spoke

[Jonathan Greer]

Hi,
As part of our ongoing SIR implementation, we are configuring the Microsoft Exchange Online spoke.

We are having trouble with the Connection Settings, and the API Credentials. The API Credentials will not authenticate. We have worked with our internal Exchange team, even granting temporary Global Admin permissions, and trouble shooting other possible credential issues. We have walked through the set up documentation, such as:
https://docs.servicenow.com/bundle/rome-security-management/page/product/secops-integration-microsoft-exchange-online/task/ms-azure-account.html#ms-azure-account

The MID and OAuth creds are validating (see attached screen shot)

Any tips or ideas would be much appreciated.

[MattiasJonsson · Accepted solution]

You say the API Credentials won't authenticate - at what step?

What error message do you get?

Also, the uploaded picture did not come through, pls upload again if relevant.

If helpful or correct, please indicate so!

[Jonathan Greer]

We solved the issue. The API credentials ended up working when we set up the O365 account as Azure only.

Error we were seeing: 

ECC Queue payload:

[tranphuong30]

Hi Jonathan, can you share more details when setting up the O365 account as Azure only? I'm running into the same error message "The user is not recognized as a managed user, or a federated user. Azure AD was not able to identify the IdP that needs to process the user" in Agent log on my Mid Server.