The endpoints used by the AR service to perform Azure functions are:
https://login.microsoftonline.com/
The Active Roles Administration Service and Active Roles Web Interface hosts must have access to these endpoints. To confirm this, use an internet browser installed on the host, while logged onto the Active Roles host as the Active Roles service account.
When attempting to visit https://login.microsoftonline.com/ there should be a credential prompt.
When attempting to visit https://graph.microsoft.com/ there should be a redirect to https://developer.microsoft.com/en-us/graph
Accessing https://graph.windows.net/ using an internet browser from the Active Roles Administration Service host is expected to result in an HTTP 400 error message. It should be possible to access the following endpoint from the Microsoft Graph Explorer from the Active Roles Administration Service host:
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center