Skip to Content

How to fix failed to get Microsoft Entra Groups due to API Permission on Azure

By: Author Alex Lim

Posted on

Categories Troubleshooting

This article describes that FortiSASE fails to get Microsoft Entra Groups.

Scope

FortiSASE.

Solution

The FortiSASE is configured to connect to Microsoft Entra for SAML Authentication, but FortiSASE is unable to fetch the groups configured on Microsoft ENTRA, and its showing as Failed to get Microsoft Entra Groups.

Things to Check:

  1. The SAML test from FortiSASE shows as successful.
  2. SAML users can connect to a VPN without any issues.

Issue:

As shown below, FortiSASE is still unable to fetch the groups configured on Microsoft ENTRA, and it is showing as failed to get Microsoft Entra Groups.

How to fix failed to get Microsoft Entra Groups due to API Permission on Azure

Before searching for Azure user groups from FortiSASE, the group searching permission needed to be configured on Azure.