Assistance Required with BadRequest Error During User Provisioning in No Gallery App

Question

Dear Microsoft Support Team,

I am encountering an issue during user provisioning in an app I created, which was built without using any gallery templates. The error message I am receiving is:

Error message StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details. Web Response: Password required

Could you kindly assist me in identifying the root cause of the issue and provide guidance on how to resolve it?

Answer 1

Hello @Elvis Van ,

Thank you for posting your query on Microsoft Q&A.

Based on your issue description, I understand that you are encountering an issue during user provisioning in an app which you have created, which was built without using any gallery templates. The error message you are receiving is:

Error message StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details. Web Response: Password required

Firstly, I observed from the Screenshot which you have provided that jobID which you are using is customappsso.

Understanding the provisioning job:

The provisioning service uses the concept of a job to operate against an application. The jobID can be found in the progress bar. All new provisioning applications are created with a jobID starting with "scim". The scim job represents the current state of the service. Older jobs have the ID "customappsso". This job represents the state of the service in 2018.

If you are using an application in the gallery, the job generally contains the name of the app (such as zoom snowFlake or dataBricks). You can skip this documentation when using a gallery application. This primarily applies for non-gallery applications with jobID SCIM or customAppSSO.

Please refer to the below document for the steps to upgrade from the older customappsso job to the SCIM job

Known issues with System for Cross-Domain Identity Management (SCIM) 2.0 protocol compliance - Microsoft Entra ID | Microsoft Learn 

Based on the below error message, we can see that the Web Response: Password required

Error message StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details. Web Response: Password required

Please note that Provisioning passwords isn't supported.

Please refer to the below document for your reference.

https://learn.microsoft.com/en-us/entra/identity/app-provisioning/known-issues?pivots=app-provisioning#service-issues

Additionally, please select the failure Provisioning logs and provide us the Steps, Troubleshooting & Recommendations, Modified Properties and Summary Screenshots which will be similar to the below attached Screenshots.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,

Sanoop Mohan

Answer 2

The error being returned is coming from your SCIM server, not from Entra. Your SCIM server is failing the POST /Users request and says the reason is "password required".

As mentioned in the other answer to this question, the password attribute is not supported.

As a side note, as you started your post with "Dear Microsoft Support Team", I'd like to clarify that this is the Microsoft Q&A platform and is a public forum where both Microsoft employees and other individuals can see and respond to questions. This is not the place to engage with Microsoft's support teams for deep troubleshooting - that would be better accomplished with a support ticket created via portal.azure.com or portal.entra.com.