Splunk SOAR

Azure AD Graph Timeout

T_K_421
New Member

Hi all. I am running into an issue with the Azure AD Graph asset in SOAR. I had an app created in Azure app registrations with the correct permissions based on the documentation. I configured the asset in SOAR with the corresponding tenant, app, and secret information. The redirect URI was entered into the Azure app registration page with /result per the instructions. When I test connectivity, the test will time out after about a minute. I may have missed something in the documentation, but the configuration all seems correct. Has anyone else run into this?

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@T_K_421 Based on what you are seeing the likely issues are either Network or Permissions on the Azure side. 

If you followed the instructions then it should work. It may be worth either re-validating the existing config or starting again. 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...