[MSGRAPH] Unable to retrieve tenant service info

Question

Hello everyone,
I managed to connect my Laravel Application with a test account on Azure Active Directory using the official Microsoft Graph PHP package. I followed the guides to create an app on AAD, set the permissions etc. Everything worked like a charm. Then, I simply changed the credentials with the ones from my real account and now I get this error:

I've set the correct permissions inside my real app, as I did inside my test app. I already tried with Graph Explorer and everything works fine

Any suggestion to fix this?

Thanks in advance

Answer 1

Hi,
Thanks a lot for your reply. This is the documentation I followed: https://github.com/microsoftgraph/msgraph-sdk-php
and this is my code:

    $tenantId = '--------------';
    $clientId = '--------------';
    $clientSecret = '--------------';
    $guzzle = new \GuzzleHttp\Client();
    $url = 'https://login.microsoftonline.com/' . $tenantId . '/oauth2/token?api-version=beta';
    $token = json_decode($guzzle->post($url, [
        'form_params' => [
            'client_id' => $clientId,
            'client_secret' => $clientSecret,
            'resource' => 'https://graph.microsoft.com/',
            'grant_type' => 'client_credentials',
        ],
    ])->getBody()->getContents());
    $accessToken = $token->access_token;
    $graph = new \Microsoft\Graph\Graph();
    $graph->setBaseUrl("https://graph.microsoft.com/")
        ->setApiVersion("beta")
        ->setAccessToken($accessToken);
    ...

so I think I'm specifying the correct tenant to point, right?

For my tests, I used a brand new test account, not my original one.

Answer 2

@Alessio Vietri
Thank you for your time and patience throughout this issue! I received a response from our engineering team and it looks like this could potentially be related to your O365 License.

Update:

• Can you make sure the tenant has a valid SharePoint online subscription. Looks like the test user does not have an O365 license. Can you please verify?
• Need clarification from customer on what exactly was working on Graph Explorer - Graph Explorer uses User token, but it looks like the customer is using client credential flow to get the token. Client credential flow will not work in Graph Explorer.
• Can you please ask customer to verify by logging in with the test user (non working) in Graph Explorer to see if they can access the drive items from the test account too?

If the license is not the issue, can you share the inner error details, (request id an timestamp).

If you have any other questions, please let me know.