On May 3, 2022, the SaaS Management MicrosoftAzure andAzure Client Credentials integrations will migrate from Microsoft Azure AD API to Microsoft Graph API. The Azure AD Graph API is now deprecated. Starting June 30, 2022, support ends for Azure AD Graph. Apps using Azure AD Graph after June 30,2022will no longer receive responses from the Azure AD Graph endpoint. The following details will help you prepare for the Microsoft Graph API migration.
Action Required for New SaaS Management Integrations with Azure and Azure Client Credentials
You must grant permissions for Microsoft Graph API instead of Azure AD Graph API. Refer to the future API endpoints below.
Azure and Azure Client Credentials API Endpoints
Below are the future Microsoft Graph API endpoints.
Actions Required for Existing SaaS Management Integrations with Azure and Azure Client Credentials
Due to SaaS Management's migration from Microsoft Azure AD APIs to Microsoft Graph APIs, existing Azure and Azure Client Credentials integrations will fail due to a 401 Unauthorized Error.
Actions for Existing Azure Integrations
Once the Azure integration tasks start failing, you must reauthorize the integration.
For the Microsoft Graph APIs, an Offline_access permission is also necessary for the refresh token generation.
Complete the following action to prevent this error for Existing Azure Client Credentials Integrations
Update the existing permissions to the required Microsoft Graph API permissions:
IMPORTANT: The Azure integration with SaaS Management will fail if consent is not given to both the AuditLog.Read.All and the Directory.Read.All permissions. For details, refer to the Microsoft List signIns documentation section.