WaelHamze / xrm-ci-framework

xRM CI Framework provides you with the tools automate the build and deployment of your CRM Solution. Using the framework to implement a fully automated DevOps pipeline will allow you to deploy more frequently with added consistency and quality.
MIT License
185 stars 116 forks source link

Copy Online Instance - Error ID3242 #267

Open AK-RenegadeX opened 4 years ago

AK-RenegadeX commented 4 years ago

@WaelHamze I'm currently attempting to copy an instance from Production to Sandbox and running into the following error. The same configuration worked in an demo trial tenant.

Federated service at https://xxx.xxx.gov/adfs/services/trust/13/usernamemixed returned error: ID3242: The security token could not be authenticated or authorized.

AK-RenegadeX commented 4 years ago

Seems I was pointing to wrong api URL, my error is now: Need a non-empty authority.

AK-RenegadeX commented 4 years ago

Added the Tenant ID to command, this further defines the error as: ERROR REQUESTING Token FROM THE Authentication context returns null and then ends in object reference exception.

I've added TLS1.2 statement as suggested by forum with no lock.

AK-RenegadeX commented 4 years ago

After using the government service provider, I'm getting this error with both the MSCRM tools and the PowerShell equivalent: Operation returned an invalid status code 'Forbidden'

WaelHamze commented 4 years ago

@AK-RenegadeX I presume you are using the latest online management API right? Did you try to open a ticket with vendor?

AK-RenegadeX commented 4 years ago

Yes, I thought I was using the latest version but not sure how to validate. I have sent an email to the vendor via the PowerShell Gallery.

Here is a screen shot of my pipeline.

-- Shane

On Apr 20, 2020, at 8:27 AM, WaelHamze notifications@github.com wrote:

@AK-RenegadeX https://github.com/AK-RenegadeX I presume you are using the latest online management API right? Did you try to open a ticket with vendor?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/WaelHamze/xrm-ci-framework/issues/267#issuecomment-616664783, or unsubscribe https://github.com/notifications/unsubscribe-auth/AHXAPZ46NEDENU6H7ES62ATRNRZYHANCNFSM4MCVKK2Q.

WaelHamze commented 4 years ago

@AK-RenegadeX I presume you have managed to fix this?

AK-RenegadeX commented 4 years ago

Not yet but I believe it has something to do with the configuration of the Dynamics instances as they are in GCC and could be limited by the additional security restrictions.

On Jul 9, 2020, at 10:31 PM, WaelHamze notifications@github.com wrote:

@AK-RenegadeX https://github.com/AK-RenegadeX I presume you have managed to fix this?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/WaelHamze/xrm-ci-framework/issues/267#issuecomment-656508764, or unsubscribe https://github.com/notifications/unsubscribe-auth/AHXAPZ6T5LHAGBKJGRZSZ3LR22YVTANCNFSM4MCVKK2Q.

WaelHamze commented 4 years ago

@AK-RenegadeX I presume the account you are running this under is a Dynamics 365 Service Admin and has access to both of the instances?

Also is MFA enabled for this account?

AK-RenegadeX commented 4 years ago

Unfortunately the company that owns the instances doesn’t grant this privilege, I am using a System Administrator account to do the copy.

On Jul 12, 2020, at 10:30 PM, WaelHamze notifications@github.com wrote:

@AK-RenegadeX https://github.com/AK-RenegadeX I presume the account you are running this under is a Dynamics 365 Service Admin and has access to both of the instances?

Also is MFA enabled for this account?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/WaelHamze/xrm-ci-framework/issues/267#issuecomment-657385409, or unsubscribe https://github.com/notifications/unsubscribe-auth/AHXAPZ4PMNLRHUGGV4QCAULR3KSZJANCNFSM4MCVKK2Q.

WaelHamze commented 4 years ago

@AK-RenegadeX can you able to perform a copy from the UI using the same acccount? https://docs.microsoft.com/en-us/power-platform/admin/copy-environment