How to configure the Graph connector agent

It sounds like you're encountering an issue with the application credentials when configuring the Graph Connector agent. Here are some steps to troubleshoot the invalid application credentials error:

1. Verify App Registration: Ensure that the app is correctly registered in Microsoft Entra ID. Double-check the Application (client) ID and the Client secret you are using.
2. Check API Permissions: Make sure that the API permissions you added to the app registration are granted admin consent. You can do this by navigating to the API permissions section of your app registration and confirming that the permissions are in the "granted" state.
3. Client Secret Validity: If you generated a new client secret, ensure that you are using the correct one. Remember that the client secret is only shown once when created, so if you did not save it, you may need to create a new one.
4. Authentication Method: Ensure that you are using the correct authentication method when signing in. If you are using a client secret, make sure that it is configured properly in the Graph Connector agent settings.
5. Agent Configuration: When configuring the agent, ensure that you are entering the correct details in the configuration fields, including the app name, Application ID, and Client secret.
6. Logs and Error Details: Check the logs for any additional error messages that might provide more context on the issue. This can help identify if there are specific problems with the connection or permissions.

If you continue to face issues after verifying these steps, consider reviewing the troubleshooting documentation for the Graph Connector agent for further guidance.

References:

• Microsoft Graph connector agent
• Troubleshooting the File Share Microsoft 365 Copilot connector

Hi Andy,

the “invalid application credentials” error usually occurs when the Graph Connector agent cannot authenticate using the app registration in Microsoft Entra ID. To resolve this, make sure your app is correctly registered and you have copied the Application (client) ID and Client Secret when it was created, since the secret is only shown once. Ensure the app has the required application permissions—ExternalItem.ReadWrite.OwnedBy, ExternalItem.ReadWrite.All, ExternalConnection.ReadWrite.OwnedBy, and Directory.Read.All—and that admin consent has been granted. Use an account with the Global Administrator, Application Administrator, or Search Administrator role to configure the agent. When entering the agent details, check that the Agent Name, Application ID, and Client Secret are correct and have no extra spaces or typos. Also, verify that your machine can access login.microsoftonline.com and graph.microsoft.com, and review the agent logs at C:\ProgramData\Microsoft\GraphConnectorAgent\Logs if the problem persists. Following these steps should allow the agent to register successfully.

References:

1. Microsoft Graph connector agent
2. Register an application in Microsoft Entra ID
3. Add app roles to your application and receive them in the token

Thank you.

Karan Shewale.

If this response resolves your issue, please Accept the answer and, if helpful, click the “Upvote” button. Your feedback helps us improve and assist others more effectively.