{"id":4235,"date":"2019-01-07T19:12:22","date_gmt":"2019-01-08T00:12:22","guid":{"rendered":"http:\/\/lisa.rushworth.us\/?p=4235"},"modified":"2019-01-08T09:28:20","modified_gmt":"2019-01-08T14:28:20","slug":"ugh-mfa","status":"publish","type":"post","link":"https:\/\/www.rushworth.us\/lisa\/?p=4235","title":{"rendered":"Ugh! MFA"},"content":{"rendered":"\n

I am trying to use Microsoft Graph to read\/write an Excel spreadsheet stored in SharePoint. It’s an ugly process to start with — they don’t exactly make it easy to find the right<\/em> ID numbers so you can reference the spreadsheet in the first place, but I finally<\/em> got the proper URL. And then I tried to do the password-based token authentication. <\/p>\n\n\n\n

{“error”:”invalid_grant”,”error_description”:”AADSTS70002: Error validating credentials. AADSTS50126: Invalid username or password\\r\\nTrace ID: b43d1973-c253-4889-8756-354e5bd77200\\r\\nCorrelation ID: 9cf94602-9d72-4790-8dcc-6cf0471058f9\\r\\nTimestamp: 2019-01-08 00:01:47Z”,”error_codes”:[70002,50126],”timestamp”:”2019-01-08 00:01:47Z”,”trace_id”:”b43d1973-c253-4889-8756-354e5bd77200″,”correlation_id”:”9cf94602-9d72-4790-8dcc-6cf0471058f9″}<\/p>\n\n\n\n

Hint: the password isn’t<\/em> wrong. I’ve seen a lot of comments online about this meaning the secret<\/em> is wrong — which seemed reasonable, since I’m not seeing any auth traffic against the user account. But if you put in a known bad secret, there is a different invalid secret error.<\/p>\n\n\n\n

{“error”:”invalid_client”,”error_description”:”AADSTS70002: Error validating credentials. AADSTS50012: Invalid client secret is provided.\\r\\nTrace ID: 59f4c7c8-73ab-4adb-bf15-10250a190d00\\r\\nCorrelation ID: 0a95810c-19e2-4fc6-a7be-c0ca7235d824\\r\\nTimestamp: 2019-01-08 00:00:37Z”,”error_codes”:[70002,50012],”timestamp”:”2019-01-08 00:00:37Z”,”trace_id”:”59f4c7c8-73ab-4adb-bf15-10250a190d00″,”correlation_id”:”0a95810c-19e2-4fc6-a7be-c0ca7235d824″}<\/p>\n\n\n\n

But<\/strong> <\/em>we use MFA … and I’ve got no way to perform the MFA validation. Sigh!<\/p>\n","protected":false},"excerpt":{"rendered":"

I am trying to use Microsoft Graph to read\/write an Excel spreadsheet stored in SharePoint. It’s an ugly process to start with — they don’t exactly make it easy to find the right ID numbers so you can reference the spreadsheet in the first place, but I finally got the proper URL. And then I …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[663,719,739],"class_list":["post-4235","post","type-post","status-publish","format-standard","hentry","category-coding","tag-azure-ad","tag-microsoft-graph","tag-multi-factor-authentication"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/4235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4235"}],"version-history":[{"count":1,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/4235\/revisions"}],"predecessor-version":[{"id":4236,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/4235\/revisions\/4236"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}