I am configuring the Microsoft Entra ID Connector in RSA Governance & Lifecycle and encountering a 401 Unauthorized error during provisioning Activities.

Environment

• Product: RSA Governance & Lifecycle
• Connector: Restful Webservice
• Operation: Connector Capabilities
• Target System: Microsoft Entra ID (Azure AD)
• Graph Endpoint:

OAuth Configuration:

Client ID: a726fb78-c915-47b7-XXXX-a3d33b3a599c

Client Secret:XXXXXXXXXX

Authorization Endpoint: https://login.microsoftonline.com/d87fef31-9588-4235-b3fd-9cdfeeb940c5/oauth2/v2.0/authorize?response_type=code&response_mode=query& scope=https%3A%2F%2Fgraph.microsoft.com%2F.default& state=12345

AccessToken Endpoint:https://login.microsoftonline.com/d87fef31-9588-4235-b3fd-9cdfeeb940c5/oauth2/v2.0/token

Redirect URI: https://localhost/aveksa/oauth/callback

Validation Performed

1. Authorization Endpoint is working.
2. User successfully authenticates against Microsoft Entra ID.
3. Authorization Code is generated and returned to the callback URL.
4. Client Secret is configured and valid.
5. Connector is able to reach Microsoft Graph endpoint.

My Observation:

1. App Registration is correct
2. Permissions are granted
3. Admin Consent is granted
4. Global Administrator account is used
5. Authorization Code generation works
6. Access Token Generation in RSA successfully Working.

AFX Connector log: