Error code

Sophos All models code XDR-9781

No approved translation for this record yet; showing the original text.

Meaning

Some Microsoft Entra ID (Azure AD) security configurations can interfere when onboarding a new Microsoft Response Action (Graph Security API v2) integration within the Central Dashboard. This may result in the integration not completing, with the following behaviours observed: The onboarding flow completes Microsoft authentication successfully, but the integration is not created in Central A generic error may be shown during or after provisioning (for example, “Something went wrong” or credential provisioning failure) No clear UI error is presented, and it appears onboarding was successful (Credential Manager entry may exist), but the integration is missing Provisioning silently fails during backend operations such as: Application credential (secret) creation Permission grant or admin consent Service principal configuration This can be seen with integrations that require Microsoft Graph Security API permissions and automated provisioning, particularly the Microsoft Response Action integration. Workaround: To check/confirm if this is the issue, validate whether restrictive Entra ID policies are configured within the tenant. These policies may block application behaviour required for

Member details

Signed-in members see the LED pattern and how to read the code with the remote control on eligible records.

View details as a member

Solution

Solution steps are available to members and are not shown on this page. Answer the questions to open the solution.

Remote technician support

Get help from a technician over a video call.

Send a message Voice call Video call