Environment
Identity Manager 4.8.x
Identity Manager 4.9
Azure AD Driver 5.2 with Identity Manager Exchange Service
Situation
During the Azure AD Driver startup the 403 Forbidden error is observed in the driver's traces when the driver is trying to connect to the Identity Manager Exchange Service and the service is configured to use Certificate Based Authentication. The following errors can be seen in the Azure AD Driver's traces:
[01/11/25 10:00:01.774]:Azure AD Driver ST:Azure AD Driver_Exchange: Response code and message: 403 Forbidden
[01/11/25 10:00:01.774]:Azure AD Driver ST:Azure AD Driver_Exchange: Http response status : HTTP/1.1 403 Forbidden
...
[01/11/25 10:00:01.776]:Azure AD Driver ST:Azure AD Driver: com.novell.nds.dirxml.driver.azure.exceptions.ExchangeException: com.novell.nds.dirxml.driver.azure.exceptions.ChannelException: Forbidden
at com.novell.nds.dirxml.driver.azure.ExchangeAPI.initExchange(ExchangeAPI.java:436)
at com.novell.nds.dirxml.driver.azure.ExchangeAPI.initializeChannel(ExchangeAPI.java:325)
at com.novell.nds.dirxml.driver.azure.AZDriverShim.initRestChannels(AZDriverShim.java:272)
at com.novell.nds.dirxml.driver.azure.AZDriverShim.getSchema(AZDriverShim.java:107)
at com.novell.nds.dirxml.engine.Driver.getShimSchema(Driver.java:1890)
at com.novell.nds.dirxml.engine.Driver.startShim(Driver.java:1646)
at com.novell.nds.dirxml.engine.Driver.initialize(Driver.java:330)
at com.novell.nds.dirxml.engine.Driver.<init>(Driver.java:296)
at com.novell.nds.dirxml.engine.DriverEntry.run(DriverEntry.java:626)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: com.novell.nds.dirxml.driver.azure.exceptions.ChannelException: Forbidden
at com.novell.nds.dirxml.driver.azure.util.AzureUtils.checkForFatalStatus(AzureUtils.java:936)
at com.novell.nds.dirxml.driver.azure.ExchangeAPI.initExchange(ExchangeAPI.java:429)
... 9 more
During that time, there are no errors logged to the Identity Manager Exchange Service debug logs or in the Event Viewer -> Application log on the Windows system where the service is installed.