Azure - Account Aggregation Failing

IdentityIQ (IIQ) IIQ Discussion and Questions
1

We use IIQ 8.3 p1

Azure Account Aggregation task failed with the following error:
sailpoint.connector.ConnectorException: Exception occurred in Iterate Objects. Error message - Exception occurred in processReadRequest. Error - Exception occurred while trying to receive data from Server. Number of retries exceeded.Access blocked to AAD Graph API for this application. Migrate from Azure Active Directory (Azure AD) Graph to Microsoft Graph - Microsoft Graph | Microsoft Learn.

Does anybody know how to fix this error? The agg task was working well until today. Is p4 using Microsoft Graph instead of Azure AD Graph?
Any help is greatly appreciated!

2

I was able to extend Azure AD Graph access

3

The Graph APIs need to be included in the firewall allow list for all SailPoint Servers. The network team can assist by adding the following URLs to allow connections:

image
image1498×273 12.8 KB

Reference Doc for allowed URLs: Prerequisites
Reference Doc for Permissions: Required Permissions

4

I was able to solve by adding the below entry in application xml

<entry key="msgraph-api-version" value="beta"/>
<entry key="useMSGraphAPI">
    <value>
      <Boolean>true</Boolean>
    </value>
  </entry>