SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-06-12 18:32:07 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Unable to setup Entra ID #726

New Issue
Closed
opened 2025-11-20 05:16:33 -05:00 by saavagebueno · 4 comments
saavagebueno commented 2025-11-20 05:16:33 -05:00
Owner
Copy Link

Originally created by @arnokretschmer on GitHub (Mar 21, 2024).

Hello,
I don't know what I'm doing wrong - can somebody help me please?
The Management Container logs:
024-03-21T15:34:47Z WARN management/server/account.go:888: failed warming up cache due to error: unable to get https://graph.microsoft.com/v1.0/users?%24select=id%2CdisplayName%2Cmail%2CuserPrincipalName&%24top=500, statusCode 403
2024-03-21T15:35:14Z INFO management/server/account.go:1582: overriding JWT Domain and DomainCategory claims since single account mode is enabled
2024-03-21T15:35:14Z ERRO management/server/http/middleware/auth_middleware.go:88: Error when validating JWT claims: unable to get https://graph.microsoft.com/v1.0/users?%24select=id%2CdisplayName%2Cmail%2CuserPrincipalName&%24top=500, statusCode 403

my setup.env:
...
NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://login.microsoftonline.com/TENANTID/v2.0/.well-known/openid-configuration"
NETBIRD_AUTH_AUDIENCE="APP-ID"
NETBIRD_AUTH_CLIENT_ID="APP-ID"
NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email offline_access api://APP-ID/api"
NETBIRD_AUTH_USER_ID_CLAIM="oid"
NETBIRD_USE_AUTH0="false"
NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none"
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID=""
NETBIRD_AUTH_DEVICE_AUTH_AUDIENCE=$NETBIRD_AUTH_AUDIENCE
NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid"
NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN=false
NETBIRD_AUTH_PKCE_REDIRECT_URL_PORTS="53000"
NETBIRD_MGMT_IDP="azure"
NETBIRD_IDP_MGMT_CLIENT_ID=$NETBIRD_AUTH_CLIENT_ID
NETBIRD_IDP_MGMT_CLIENT_SECRET="SECRET"
NETBIRD_IDP_MGMT_EXTRA_GRAPH_API_ENDPOINT="https://graph.microsoft.com/v1.0"
NETBIRD_IDP_MGMT_EXTRA_OBJECT_ID="Object-ID-REGISTERED-APP"
NETBIRD_AUTH_REDIRECT_URI="/auth"
NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth"

Thanks

Originally created by @arnokretschmer on GitHub (Mar 21, 2024). Hello, I don't know what I'm doing wrong - can somebody help me please? The Management Container logs: 024-03-21T15:34:47Z WARN management/server/account.go:888: failed warming up cache due to error: unable to get https://graph.microsoft.com/v1.0/users?%24select=id%2CdisplayName%2Cmail%2CuserPrincipalName&%24top=500, statusCode 403 2024-03-21T15:35:14Z INFO management/server/account.go:1582: overriding JWT Domain and DomainCategory claims since single account mode is enabled 2024-03-21T15:35:14Z ERRO management/server/http/middleware/auth_middleware.go:88: Error when validating JWT claims: unable to get https://graph.microsoft.com/v1.0/users?%24select=id%2CdisplayName%2Cmail%2CuserPrincipalName&%24top=500, statusCode 403 my setup.env: ... NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://login.microsoftonline.com/TENANTID/v2.0/.well-known/openid-configuration" NETBIRD_AUTH_AUDIENCE="APP-ID" NETBIRD_AUTH_CLIENT_ID="APP-ID" NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email offline_access api://APP-ID/api" NETBIRD_AUTH_USER_ID_CLAIM="oid" NETBIRD_USE_AUTH0="false" NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none" NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID="" NETBIRD_AUTH_DEVICE_AUTH_AUDIENCE=$NETBIRD_AUTH_AUDIENCE NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid" NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN=false NETBIRD_AUTH_PKCE_REDIRECT_URL_PORTS="53000" NETBIRD_MGMT_IDP="azure" NETBIRD_IDP_MGMT_CLIENT_ID=$NETBIRD_AUTH_CLIENT_ID NETBIRD_IDP_MGMT_CLIENT_SECRET="SECRET" NETBIRD_IDP_MGMT_EXTRA_GRAPH_API_ENDPOINT="https://graph.microsoft.com/v1.0" NETBIRD_IDP_MGMT_EXTRA_OBJECT_ID="Object-ID-REGISTERED-APP" NETBIRD_AUTH_REDIRECT_URI="/auth" NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth" Thanks
saavagebueno added the triage-needed label 2025-11-20 05:16:33 -05:00
saavagebueno commented 2025-11-20 05:16:34 -05:00
Author
Owner
Copy Link

@arnokretschmer commented on GitHub (Mar 23, 2024):

I made an Error on the Permissions at Entra

@arnokretschmer commented on GitHub (Mar 23, 2024): I made an Error on the Permissions at Entra
saavagebueno commented 2025-11-20 05:16:34 -05:00
Author
Owner
Copy Link

@Bastika07 commented on GitHub (May 14, 2024):

What kind of errors did you had? I have the same issue and can´t find it.

@Bastika07 commented on GitHub (May 14, 2024): What kind of errors did you had? I have the same issue and can´t find it.
saavagebueno commented 2025-11-20 05:16:34 -05:00
Author
Owner
Copy Link

@arnokretschmer commented on GitHub (May 14, 2024):

I mixed up the permission type;
the API must be a delegated permission and the User.Read.All must be an application permission.

@arnokretschmer commented on GitHub (May 14, 2024): I mixed up the permission type; the API must be a delegated permission and the User.Read.All must be an application permission.
saavagebueno commented 2025-11-20 05:16:35 -05:00
Author
Owner
Copy Link

@Bastika07 commented on GitHub (May 14, 2024):

Ah! Okay! Thanks a lot :-)

@Bastika07 commented on GitHub (May 14, 2024): Ah! Okay! Thanks a lot :-)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#726
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?