+7Dear Community,
I’m having some issues with connecting to the Azure Active Directory. We want to use this data for RLS and feed this from the DWH.
I’ve set up the Active Directory Connector and put in credentials:
After a minute or so I get an timeout. If I leave out the OAuth stuff I get an not authorized. What do I need to set up here to get the data from the AAD?
Thanks!
Best answer by Thomas Lind
Hi
Just adding to what was already said. The app is important for this. It will read users and groups from the graph api. You can try it out in Postman if you want to be sure it has enough rights. CData states this as needed to gain access.
- Select the Microsoft Graph API, and the following delegated permissions allow access to the full functionality of the driver:
- Read and write all Domains, Groups
- Read all Users, Directories, Devices, RoleManagement, Organization
- If you have specified the use of permissions that require admin consent (such as the Application Permissions), you can grant them from the current tenant on the API Permissions page.
+7Hi
as you are not getting any rights errors (yet) I assume your App Registration permissions are correct. Have you set up level 3 verbosity logging and checked what is going on? Does lengthening timeouts give any results?
+5Hi
Please see documentation on how to establish a connection to Azure AD 2024 Cdata connector here:
https://cdn.cdata.com/help/CJK/ado/pg_connection.htm
Did you try clicking Authorize Oauth, and if so was the authorization successful?
If you still have issues please send a log file with verbosity level 3 to support@timextender.com
+5Hi
Just adding to what was already said. The app is important for this. It will read users and groups from the graph api. You can try it out in Postman if you want to be sure it has enough rights. CData states this as needed to gain access.
- Select the Microsoft Graph API, and the following delegated permissions allow access to the full functionality of the driver:
- Read and write all Domains, Groups
- Read all Users, Directories, Devices, RoleManagement, Organization
- If you have specified the use of permissions that require admin consent (such as the Application Permissions), you can grant them from the current tenant on the API Permissions page.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
