The following table lists potential problems administrators might encounter during the setup or deployment of the Office 365 Connector, along with possible solutions.

For more information and solutions, see PingFederate Office 365 FAQ in the Knowledge Base.

Problem Possible Solution

The Exception "{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."}" appears in server.log

In some cases the app created to provision using the Microsoft Graph API may not have the necessary permissions to access and modify all attributes. If you are seeing some provisioning events failing with an Insufficient privileges to complete the operation. exception elevating the permission level of the app may fix this. More information on this issue, as well as the script needed to elevate the permissions using Azure AD Module for Windows PowerShell can be found at Microsoft Support.