An error occurred executing Configure AAD Sync task: ApplicationManagedBy parameter is invalid or missing.

Question

Whwn upgrading entraID Connect I get the message: "An error occurred executing Configure AAD Sync task: ApplicationManagedBy parameter is invalid or missing."

Answer 1

[ERROR] [ERROR] Required authentication parameters missing from connector configuration

At C:\Program Files\WindowsPowerShell\Modules\ADSyncTools\2.4.0\ADSyncTools.psm1:9765 char:9

•     throw "`n[ERROR] $($_.Exception.Message)"
  

•     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : OperationStopped: (

[ERROR] [ERROR...r configuration:String) [], RuntimeException

+ FullyQualifiedErrorId :

[ERROR] [ERROR] Required authentication parameters missing from connector configuration

Answer 2

The error message "ApplicationManagedBy parameter is invalid or missing" typically occurs after an automatic upgrade of Microsoft Entra Connect when the application-based authentication (ABA) settings are not properly configured. This issue arises because the Synchronization Service Manager UI does not handle the new ABA fields correctly, leading to missing values for the ApplicationManagedBy, CertificateManagedBy, and CertificateId parameters.

To resolve this issue, you can use a PowerShell repair function to restore the missing parameters. Here are the steps:

1. Start a new PowerShell session with Run as Administrator.
2. Install or update the ADSyncTools module from PowerShell Gallery:

      [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
      Install-Module ADSyncTools # If ADSyncTools isn't installed, or;
      Update-Module ADSyncTools # If ADSyncTools is already installed
   

3. Import the ADSyncTools module:

      Import-Module ADSyncTools
   

4. Run the repair function:

      Repair-ADSyncToolsEntraAppParameters
   

This process should restore the missing parameters, allowing you to run the configuration wizard without errors and ensuring that future certificate rollovers succeed.

It's also important to avoid using the Synchronization Service Manager UI to view or edit the Microsoft Entra connector's properties when ABA is enabled, as this can inadvertently remove required settings.

---

References:

• Troubleshoot Microsoft Entra Connect Sync application-based authentication
• Microsoft Entra Connect is not working correctly after an automatic upgrade