Microsoft Clipchamp application fails to sign in with Office 365 Gatelet enabled

Products

• CASB Gateway Advanced

Issue/Introduction

After enabling the Office 365 Gatelet the desktop Microsoft Clipchamp application fails to sign in. 

Cause

Enabling O365 Gatelet enables TLS interception, among others, for graph.microsoft.com. Microsoft Clipchamp desktop application (v3+) is using certificate pinning for graph.microsoft.com which does not allow TLS interception in the connection which is necessary for the CASB/DLP content inspection.

Resolution

Disable TLS interception for graph.microsoft.com in Cloud SWG (WSS).

or

Use a browser edition of the application.