Microsoft Teams | Development
Building, integrating, or customizing apps and workflows within Microsoft Teams using developer tools and APIs
MS Graph API Create onlineMeeting returns error 403 Forbidden
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 66%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Sergey Kornilov
1
Reputation point
Trying to create a meeting using this API:
https://learn.microsoft.com/en-us/graph/api/application-post-onlinemeetings?view=graph-rest-beta&tabs=http
We use PHP but also tried Postman. The token is generated successfully but no matter what we do we get Forbidden response posting to https://graph.microsoft.com/beta/communications/onlineMeetings
Decoded token:
{
"typ": "JWT",
"nonce": "Z8hqVgiQ6oZxgWHjgTL0eSnFgKXijkuTUfvxOlXqtEw",
"alg": "RS256",
"x5t": "kg2LYs2T0CTjIfj4rt6JIynen38",
"kid": "kg2LYs2T0CTjIfj4rt6JIynen38"
}.{
"aud": "https://graph.microsoft.com",
"iss": "https://sts.windows.net/aaca339f-dec9-48c3-b186-31556f1b6279/",
"iat": 1602025757,
"nbf": 1602025757,
"exp": 1602029657,
"acct": 0,
"acr": "1",
"aio": "ATQAy/8RAAAAZmxXI8uQa21x5odNJtk/74+nLYxg3Zw+S3KorEG175HHMOsteSqepOjYk6vXa+l6",
"altsecid": "1:live.com:00037FFE16E4EA97",
"amr": [
"pwd"
],
"app_displayname": "new app",
"appid": "71c75173-1c5e-46b2-b463-e73c6ddcf692",
"appidacr": "1",
"email": "bigbeerbug@Stuff .com",
"family_name": "Кутаков",
"given_name": "Михаил",
"idp": "live.com",
"idtyp": "user",
"ipaddr": "71.163.165.233",
"name": "Михаил Кутаков",
"oid": "b6f07af5-91c5-4cf1-b3f5-c0aadd4011f5",
"platf": "3",
"puid": "10032000DA13CFA5",
"rh": "0.AAAAnzPKqsnew0ixhjFVbxtieXNRx3FeHLJGtGPnPG3c9pJcAMM.",
"scp": "Mail.Read OnlineMeetings.ReadWrite User.Read profile openid email",
"signin_state": [
"kmsi"
],
"sub": "gA8n_r7ynUStzWV-Nm6IwW0mO3nwZimDviN21NQ1z54",
"tenant_region_scope": "EU",
"tid": "aaca339f-dec9-48c3-b186-31556f1b6279",
"unique_name": "live.com#bigbeerbug@Stuff .com",
"uti": "g2LPX_XihU-GWKRG1mJDAA",
"ver": "1.0",
"wids": [
"62e90394-69f5-4237-9190-012177145e10",
"b79fbf4d-3ef9-4689-8143-76b194e85509"
],
"xms_st": {
"sub": "FqsCckcOPHN9NKXb5yoUyefJID5hFqE0NQ1mNhIWCdI"
},
"xms_tcdt": 1597757499
}.[Signature]
Permissions:
Any idea what is wrong?
Microsoft Teams | Development
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 18%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Shiva Keshav Varma 426 Reputation points2020-10-07T11:52:06.747+00:00 As I can see you are logging into the Application with a Delegated(Personal Microsoft Account) looking at 'idp' claim as live.com which is not supported as of now as you can see in this Document.
-
Sergey Kornilov 1 Reputation point
2020-10-07T12:55:54.523+00:00 Thank you for the input!
Do you know what and where needs to be changed so we can logon as an Application?
-
Shiva Keshav Varma 426 Reputation points
2020-10-07T15:49:19.217+00:00 You need to use work or school account of your tenant and give the required permissions and it will work. If you don't have any tenant, you can start from here.
https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-create-new-tenant -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 25%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Shiva Keshav Varma Vegesna (MINDTREE LIMITED) 1 Reputation point2020-10-15T10:16:48.627+00:00 Did it work?
-
Sergey Kornilov 1 Reputation point
2020-10-15T12:53:11.817+00:00 I don't know, we do not have work or school account. Once we give it to the client and they will test it on their own.
-
Shiva Keshav Varma 426 Reputation points
2020-10-21T12:14:53.423+00:00 Did you get any response from your client? Is the issue fixed?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 78%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
Darren Bounds 1 Reputation point2022-03-24T17:34:53.727+00:00 If it's forbidden, shouldn't the OAuth process reject a grant for the OnlineMeetings.ReadWrite?
Sign in to comment
Sign in to answer