Azure Directory Error

[COS365]

Version 4.6.4.1

When I run an Azure Directory test I get Error! java.lang.NullPointerException
If I try a login test I get Error! java.lang.Exception: com.microsoft.aad.msal4j.MsalServiceException: AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.

The log file contains the following:

[Correlation ID: 5f54fca4-c093-4772-8ced-7fdddf357a4e] Execution of class com.microsoft.aad.msal4j.AcquireTokenByAuthorizati onGrantSupplier failed.
com.microsoft.aad.msal4j.MsalServiceException: AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.
Trace ID: 2841add4-b275-4abe-a919-674e9fa93d00
Correlation ID: 5f54fca4-c093-4772-8ced-7fdddf357a4e
Timestamp: 2022-12-01 18:54:02Z
at com.microsoft.aad.msal4j.MsalServiceExceptionFacto ry.fromHttpResponse(MsalServiceExceptionFactory.ja va:43)
at com.microsoft.aad.msal4j.TokenRequestExecutor.crea teAuthenticationResultFromOauthHttpResponse(TokenR equestExecutor.java:96)
at com.microsoft.aad.msal4j.TokenRequestExecutor.exec uteTokenRequest(TokenRequestExecutor.java:37)
at com.microsoft.aad.msal4j.AbstractClientApplication Base.acquireTokenCommon(AbstractClientApplicationB ase.java:120)
at com.microsoft.aad.msal4j.AcquireTokenByAuthorizati onGrantSupplier.execute(AcquireTokenByAuthorizatio nGrantSupplier.java:63)
at com.microsoft.aad.msal4j.AuthenticationResultSuppl ier.get(AuthenticationResultSupplier.java:59)
at com.microsoft.aad.msal4j.AuthenticationResultSuppl ier.get(AuthenticationResultSupplier.java:17)
at java.util.concurrent.CompletableFuture$AsyncSupply .run(CompletableFuture.java:1604)
at java.lang.Thread.run(Thread.java:750)

[support200]

Do you have a valid client secret?

And there are several documents about your problem. One of them is https://nishantrana.me/2020/12/01/fi...client_secret/

It says,

This was because Allow public client flows was disabled for the application registered in Azure AD.

Enabling it fixed the issues for us.

[COS365]

I have it working now. I had to follow the instructions in the link you provided but I also have to 'Grant admin consent for Default Directory' in 'API Permissions'.

Thanks for your help.

[COS365]

When I try to login I get the following error in the logs.

Execution of class com.microsoft.aad.msal4j.AcquireTokenByAuthorizati onGrantSupplier failed.
com.microsoft.aad.msal4j.MsalInteractionRequiredEx ception: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access

Does NXFillter support 2-factor authentication with Azure?

[support200]

No. We don't support 2-factor authentication. And whatever it is, if the change was not made by you, you may need to read this, https://learn.microsoft.com/en-us/an...nupsignin.html

You can use CxLogon as a single sign-on agent. CxLogon will try to pick up Azure username from your user system and create a login session with the username on NxFilter.