Microsoft Graph Endpoint for the German Cloud - azure

The article https://developer.microsoft.com/en-us/graph/docs/concepts/deployments mentions the sovereign (national) cloud deployment in China only at the moment. What's the story for Germany?
The reason for asking is that there are AAD Login / AAD Graph endpoints specific to the German Cloud (see https://blogs.msdn.microsoft.com/azuregermany/2016/08/18/endpoints-in-microsoft-cloud-germany/, and verified), so there must be one for Microsoft Graph too, right?

Sorry for the delayed response. We just updated our documentation. Please see https://developer.microsoft.com/en-us/graph/docs/concepts/deployments.
Hope this helps,

Related

How to resolve a "Transient error" from Microsoft Graph API?

I am building an app for a client using the Microsoft Grap API and when I log in with a particular account I get this error:
Request Id: d300b62e-e0a5-4f62-9957-1cc10fd42800
Correlation Id: e1912683-45cb-459e-b631-9706f6cd2479
Timestamp: 2020-04-20T07:51:51Z
Message: AADSTS90033: A transient error has occurred. Please try again.
I have tried 2 other accounts and they work without an error.
Does anyone know how I can resolve this issue or how I can start to work out what the issue might be?
EDIT:
Example of the URL being used to authorise the user
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=<clientid>&response_type=code&redirect_uri=<local_uri>&response_mode=query&scope=openid%20offline_access%20https%3A%2F%2Fgraph.microsoft.com%2Fuser.read&state=12345
Thanks,
Scott.
For those that come here in the future, the best place to check whether or not the issue is isolated to just you, or is part of a wider issue is the official Microsoft 365 Status Twitter account.
You can also check the Microsoft 365 Service health status page (but this only works if the Microsoft login services are working.) Documentation around how to check the service status is available as part of the official docs.
For Azure-related issues you can check the official Azure Support Twitter account or the Azure status page.
If the issue is localised - then you should raise a support ticket in Azure or Office 365, otherwise wait for a resolution from Microsoft.

Azure AD B2C: ROPC - Release Date Question

I have created a prototype using ROPC custom policy in Azure AD B2C. It is currently marked as "Preview". Is there an approximate release date for this feature?
This feature has been working well during the preview.
Our plan is to GA this during the first quarter of 2019 (Jan-Mar). At this time we foresee no changes necessary before General Availability. Please provide any feedback on your experience to: aadb2cpreview#microsoft.com
Thank you,
Jose
Yes, this feature about the custom policy is already released by using the Identity Experience Framework. For the details, you could read here.

How to read/update Azure B2C MFA phone number using Graph API (or any other means)

I am trying to retreive/change the MFA number on a B2C account programatically. I don't really mind how its done, and I am aware of this SO question - https://stackoverflow.com/a/40858874/243905 but that was asked a long time ago and I had hoped it was different now.
I find the B2C docs are a bit lacking in clarity on this information, and although I am able to query the users using the method detailed here: https://learn.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-devquickstarts-graph-dotnet
the object that is returned does not return the MFA details.
Is this possible through any means?
strongAuthenticationPhoneNumber can be issued in the resulting token, however it can't be edited using graph, for the moment. It's expected this capability will be available during the 2nd half of 2018.
As of today this appears to be working for Azure B2C. Microsoft Docs
There is an extra permission that the token will need. UserAuthenticationMethod.ReadWrite.All

Create B2C Policies via Graph API?

Can I create/update/delete policies via the graph api?
I've reviewed this sample and I don't see anything about policies.
No not yet, but we recently just started working on this capability. If you are interested in helping us test this functionality when it eventually becomes available in preview, please send mail describing your scenario to AADB2CPreview#microsoft.com. (we might have a private preview that we would need to enable on your test tenant specifically, or we might go straight to public preview)

How do i grant permission on my Luis.ai application to other microsoft account?

I own a Luis.ai application which I use for my chat BOT.
i want my qa guys to be able to train my Luis.ai application, so that my BOT would be smarter.
how do i grant permissions to other user to train my APP?
Now there is an option to set other users as "Collaborator" and they can then Train and modify the luis.ai app as needed.
The accounts can be independent and don't need to be from same Azure Active Directory or otherwise linked.
Basic description by Microsoft is here.
This way you add the Collaborator at
https://www.luis.ai/applications/yourAppId/0.1/settings
And this way the collaborator sees the UI:
I don't think that it's currently possible.
The easiest workaround I can think of is to create a shared account, export your LUIS application from your account and import it into the new shared account. Have in mind that the keys of your LUIS app will likely change and so you will likely need to update your bot too.
Also, you can see if using the Cognitive Services API is suitable for your scenario. If it's, then there are a bunch of operations available there.
You can use the Cognitive Services API for this.
Link - https://dev.projectoxford.ai/docs/services/5890b47c39e2bb17b84a55ff/operations/5890b47c39e2bb052c5b9c45
I haven't actually used it but you can have a look. Hope this helps.

Resources