Running CanAuthenticate query of Qlik Office 365 Sharepoint Connector (Qlik Web Connectors) fails with the following error:
AADSTS500011: The resource principal named <site address> was not found in the tenant named <tenant ID>. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
Cause:
This error is observed in the following
- Wrong base URL is provided to Qlik Web Connectors
- Admin consent is not properly configured on Sharepoint side
Environment:
- Qlik Web Connectors up to version May 2019
Resolution:
First double-check that the base URL is correct. Once this is done, consider one of the following two solutions:
- An Azure administrator on your side needs to install the application on Azure Active Directory,or
- An Azure administrator needs to consent by:
- Upgrading your Qlik Web Connectors to November 2018 Patch 3 (v2.49.5) the latest version May 2019
- Run CanAuthenticate query with an Azure AD administrator account with parameter "consent". Detailed instruction is in the pdf file attached to this comment (see under the first section "Administrator" in the file)
Note: if you receive "AADSTS90027" error code, please select "select_account" in the "Prompt / consent level" parameter. See more details in Known current issues in SaaS editions of Qlik Sense
Internal Investigation IDs:
