Microsoft Graph Connector Issues

0
Having issues with setting up Microsoft Graph Connector: We can't seem to run it as a service. seems like it wants a user to login. We can login as a user but that won't work for us for the app we are creating. So when we set the prompt to anything other than login we get this error message: Request Id: e89daf59-215b-47ca-bcde-811a7f215500Correlation Id: c8b04195-d779-4797-a2b4-30b6b72044c8Timestamp: 2025-04-14T15:42:24ZMessage: AADSTS900383: Internal error has occurred during a redirect. Please login directly to your National Cloud dedicated portal. If we use the Login on the prompt we are not pulling any data of any kind. In fact we get a error message that extremely long. The begging of it is this: com.mendix.webui.WebUIException: Exception while executing runtime operation at com.mendix.webui.actions.client.RuntimeOperationAction.$anonfun$apply$3(RuntimeOperationAction.scala:60) Caused by: com.mendix.webui.WebUIException: Exception while retrieving data for 'MicrosoftGraph.SNIP_Authorization_View.dataGrid23' on document 'MicrosoftGraph.Authorization_Resources_View' at com.mendix.webui.actions.client.RetrieveAction.apply(RetrieveAction.scala:51) Caused by: com.mendix.modules.microflowengine.MicroflowException: Error parsing JSON. next on empty iterator at MicrosoftGraph.SUB_Group_GetAll (Import with mapping : 'Import from JSON') at MicrosoftGraph.DS_Group_GetAllGroups (SubMicroflow : 'Get all groups') So can anyone help me setup Microsoft Graph Connector? Thanks
asked
2 answers
1

Hi George,

It looks like you’re trying to run the Microsoft Graph Connector without user login  like a background service  but it’s still asking for a login. This usually happens when the setup is using delegated permissions, which need a signed-in user.

 for this you can try,

    

  • Go to Azure AD > App registrations, and make sure your app is set up to use the Client Credentials flow.

  • Assign application permissions (not delegated ones).

  • Generate a Client Secret (or use a certificate).

  • In your Mendix app, configure the module to authenticate using the Client ID and Client Secret to get tokens.

AADSTS900383: Internal error has occurred during a redirect. Please login directly to your National Cloud dedicated portal.

This usually means your app is trying to log in to the wrong type of Azure cloud (like public vs. national cloud).

you can try,

  • Check if your Azure account is in a national cloud (like Azure Gov, China, etc.).

  • If yes, you need to update the token endpoint URL accordingly. For example:

  • Azure US Gov: https://qwertyu.us
  • Azure China: https://qwertyu.cn

 

Error parsing JSON. next on empty iterator at MicrosoftGraph.SUB_Group_GetAll

your application tried to map data from the API, but the response was empty or not in the format it expected.

For this,

  • Use tools like Postman to manually call the Microsoft Graph API endpoint and inspect the response.

  • Ensure that the API returns the expected data.

 For more refer the,

Microsoft Graph Connector Documentation

Troubleshoot issues with the Microsoft Graph connectors

Support Authenticating to National Cloud Deployments #396

Why is requesting a bearer access token for microsoft graph api not working - StackOverflow

 

I hope this these links more helpful for you.

 

Thanks 

Guna

answered
0

Hi Guna,

I had a meeting with Microsoft about my issues with not getting any user info on the Mendix Microsoft Graph connector. We used postman and also powershell and other tools trying to troubleshoot it. We were able to successfully get a token and get the appropriate scope using powershell scripts for our application but the actual Mendix Graph connector is not. The error we get in Mendix has a message of wrong audience which the Microsoft representative said that means that the Mendix Graph connector is using the wrong uri for the calls. Now we are in GCC High Microsoft environment so we use the ".us" uri. So  https://login.microsoftonline.us and https://graph.microsoft.us

 

The Microsoft representative believes there is either hard coded or some setting in the Mendix graph connector that is using the ".com" url instead of the ".us" url. Can you help me find where that is? obviously if it's in the hard code I probably can't do anything but if it's in the microflows or nanoflows or some settings I can change in studio I could... But I don't know where or which things to change.

 

Thanks,George Hite

answered