Graph API Beta - Analyzed Email Remediate

Matthew Helmbrecht 0

Receive the following error when attempting to POST to https://graph.microsoft.com/beta/security/collaboration/analyzedEmails/Remediate

"WWW-Authenticate": "Bearer error=\"invalid_token\", error_description=\"S2S17001: SAL was able to validate the protocol, but validation failed as none of the inbound policies were satisfied. Validation failures: 'd0b0e89f-0197-499f-894f-e787c44d6aee: InvalidAudience.\"",

I am able to successfully Get https://graph.microsoft.com/beta/security/collaboration/analyzedEmails using the same bearer token.

Bearer token payload has:

"aud": "https://graph.microsoft.com",

Role: "SecurityAnalyzedMessage.ReadWrite.All"

Ideas? Thank you.

Matthew Helmbrecht 0 Reputation points

2024-04-17T14:59:33.23+00:00

This appears to be a bug in the API. The remediation action successfully runs however the response status code is 302 (redirect) with WWW-Authenticate": "Bearer error="invalid_token"

Chased my tail on that one before realizing the job actually finished.