Questions:
Seems like the authentication request is trying to use Azure Commercial (login.microsoftonline.com) to authenticate the SP. How do we provide the correct authority (login.microsoftonline.us) for Azure Government?
If I use a REST call to get a token from login.microsoftonline.us, and pass the client credentials and secret, it works dandy.
Error:
GetSpnAuthenticationToken: Failed while processing request for access token with error: Failed to get access token by using service principal. Error: invalid_request, Error Message: AADSTS900382: Confidential Client is not supported in Cross Cloud request. Trace ID: {TRACE_ID} Correlation ID: {CORRELATION_ID} Timestamp: {TIMESTAMP}.
{
"name": "SitesList",
"type": "WebActivity",
"dependsOn": [],
"policy": {
"timeout": "0.12:00:00",
"retry": 0,
"retryIntervalInSeconds": 30,
"secureOutput": false,
"secureInput": false
},
"userProperties": [],
"typeProperties": {
"method": "GET",
"url": "https://graph.microsoft.us/v1.0/sites/root/lists",
"authentication": {
"type": "ServicePrincipal",
"userTenant": "{TENANT_ID}",
"username": "{SERVICE_PRINCIPAL_APP_ID",
"resource": "https://graph.microsoft.us",
"password": {
"type": "SecureString",
"value": "**********"
}
}
}
}