403 Error with Microsoft Entra SaaS Connector – Works with VA-Based Azure AD Connector

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi Team,

I’m encountering a 403 error when using the Microsoft Entra SaaS connector in SailPoint Identity Security Cloud. Interestingly, the same configuration works perfectly when using the VA-based Azure Active Directory connector.

Environment Details:

  • Connector Type: Microsoft Entra (SaaS)

  • Authentication: Client Credentials (Client ID & Secret)

  • Role Assigned: Global Administrator

  • VA-Based Connector Status: Successful connection and operations

  • SaaS Connector Status: Fails with 403 error

image
image919×199 7.17 KB

2

Are you using the same client credentials between the VA and SAAS sources? If they are the same, do you have any Conditional Access Policies?

Perhaps a Conditional Access Policy that blocks Graph access from unknown IPs? Or from non-company machines?