We have a working Azure Entra Rest connector.
When we explore and correlate with <150 accounts, it works fine. Now when we are testing with over 500 accounts, it fails with the following error.
2025-05-09 12:48:26,286 272288128 [ApacheDS Worker-thread-275] Azure_Entra_test_tenant (RESTResponseHandler.java:71) DEBUG - HTTP Response:
2025-05-09 12:48:26,287 272288131 [ApacheDS Worker-thread-275] Azure_Entra_test_tenant (RESTResponseHandler.java:72) DEBUG - Status Line: HTTP/1.1 429
2025-05-09 12:48:26,287 272288131 [ApacheDS Worker-thread-275] Azure_Entra_test_tenant (RESTResponseHandler.java:73) DEBUG - Status Code: 429
2025-05-09 12:48:26,287 272288131 [ApacheDS Worker-thread-275] Azure_Entra_test_tenant (RESTResponseHandler.java:74) DEBUG - Reason Phrase:
2025-05-09 12:48:26,288 272288132 [ApacheDS Worker-thread-275] Azure_Entra_test_tenant (RESTCursorPagination.java:104) ERROR - Error while executing the request : . Error = JCS@test: AzureRest: , Detailed Error: {"error":{"code":"UnknownError","message":"Too Many Requests","innerError":{"date":"2025-05-09T09:48:27","request-id":"test001","client-request-id":"test001"}}}
Release : 14.5.1
Component : CA Identity Manager
From the logs, we found out the HTTP request GET is going to Email authentication.
2025-05-09 16:31:36,684 227485 [ApacheDS Worker-thread-38] Azure_Entra_test_tenant (RESTResourceClient.java:122) DEBUG - HTTP request GET https://graph.microsoft.com/v1.0/users?%24top=100&%24select=onPremisesSamAccountName%2CuserPrincipalName%2CauthenticationEmail%2Cid HTTP/1.1
In the Azure endpoint settings, we identified an EmailAddresses attribute mapping.
The issue is resolved after removing the EmailAddresses attribute mapping from the Azure endpoint settings.