IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Unable to add inbound email though OAuth

    Posted Wed May 05, 2021 09:50 AM
    i am using Microsoft O365 user mail box to process inbound emails to resilient. when using OAuth as protocol i am unable to test connections successfully. 

    did anyone face the issue with the endpoint url used as below ? 


    Test connection fails 

    Here is the endpoint url used : 
    https://login.microsoftonline.com/*tenantid>/oauth2/v2.0/authorizeid>oauth2/v2.0/authorize


    Error received

    Connection to mailbox 'APP_Azure-OAUTH' failed. Unable to connect to the server. Review the connection details provided and try again later.

    ------------------------------
    Vijay Reddy
    ------------------------------


  • 2.  RE: Unable to add inbound email though OAuth

    Posted Wed May 19, 2021 09:58 AM
    Hey Vijay,
    can you verify you are using the correct endpoint, it appears to differ from the supported endpoint.

    please refer to https://www.ibm.com/docs/en/rsoa-and-rp/40?topic=organization-configuring-inbound-email-connection.
    Refer to the OAuth protocol section, to verify which endpoint to use

    Regards
    John

    ------------------------------
    John Quirke
    ------------------------------



  • 3.  RE: Unable to add inbound email though OAuth

    Posted Wed May 19, 2021 11:37 AM
    Hi John 

    Thank you for the response. I had couple of issues the way I granted permissions to my o365 account initially on resilient & tried other URL's related to Oauth. Later I used the same URL per documentation which worked fine. 



    ------------------------------
    Vijay Reddy
    ------------------------------