Issue in connecting to MS Entra ID(Azure AD) via cloud gateway

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

version 8.3 P1

Please share any images or screenshots, if relevant.

image
image1891×303 52.4 KB

Please share any other relevant files that may be required (for example, logs).

Shared in above artifact

Share all details about your problem, including any error messages you may have received.

From IdentityIQ trying to connect MS ENtra ID via IIQ cloud Gateway but the connection is failing

The server on which IIQ cloud Gateway is installed - From this server able to reach at login.microsoftonline.com:443 successfully.

But when going through iiq cloud gateway it gives error mentioned in above screen shot.

Let me know anyone has faced this type of issue.

Thanks

2

hi @akshay1

I believe the issue might be related to TLS/SSL trust.

If the Cloud Gateway is acting as a proxy, it could be failing to validate Microsoft’s SSL certificate. Make sure the Java truststore used by the Gateway includes the necessary root certificates for Microsoft endpoints.
You can test this by importing the Microsoft CA certs into the truststore:

keytool -import -trustcacerts -file microsoft_ca.crt -keystore <your_truststore> -alias microsoftCA

3

Hello @haideralishaik ,

Thanks for your input - I added the microsoftCA certificate to “cacert“ keystore as well as “Cloud Gateway” keystore rebooted the Tomcat service and post that performed test connection.

It is failing and getting same issue.

Just want to share findings with you - without proxy application(IIQ cloud gateway) when i tried to perform the test connection for Azure AD - It is successful.

4

Hello All,

This issue has been resolved. Giving this resolution as it may help in future to others.

Issue - Request was going from IIQ Instance to Cloud Gateway successfully, but from cloud gateway to end system it was going through firewall instead of reverse proxy.

In our case traffic is blocked at firewall.

Resolution : Added Java properties to flow the traffic from application server(Apache tomcat) through reverse proxy.

image

restart the cloud gateway Apache tomcat service, Run Cloud Gateway synchronization task and post that perform the test connection. For me it worked

Thanks,

Akshay