00u4hbtfuEzfS17zJ3561.542229149395067E12 (Qorvo Inc.) asked a question.
I have a few automated tasks that connect to Office 365 via a service account in powershell. Prior to federating Office365 with Okta, we were using ADFS and were able to connect to Office365 via powershell with no issues. Now on certain workstations, I'm able to connect to the server (Connect-Msolservice -credential $mycredentials but on others, that same command with the same credentials fails.
The error that is thrown is:
OperationStopped: (:) [Connect-MsolService], HttpRequestException
If I run the command as Connect-MsolService without the credential switch, I will get a browser window that directs me to Okta to sign in. That works correctly no matter which server I do this from. This is problematic for automated scripts since they need to run unattended without prompts. I'm drawing a blank in my Google Searches and was hoping someone in the Okta community has come across this before and know what I need to do to resolve it.
I finally figured it out (had to step away from the problem).
The issue was due to the TLS version the server was running the automated scripts on. The powershell sessions were using an unsupported version of TLS/SSL (I believe it was SSL)
I need to correct the servers cipher suite order, but for a temporary fix, I have added the .NET accelerator to force a TLS version for that powershell session.
The .NET accelerator I added was this line:
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
This sets the Powershell Session to use TLS 1.2 which is the currently highest level of TLS Powershell v5.0 supports (at least to my knowledge at the time of this posting).
Hi Bill,
THANK YOU SO MUCH!!! For posting the solution, you're one of those really cool people who does that on the internet =) My company's termination script that was handed down to me wasn't removing licenses nor really interacting via the MSONLINE module and this work around will be helpful until we can finish upgrading the rest of the servers.
I'm kind of new to this, but if you have a moment can you expand a bit on what you mean by your server's cipher suite order, my initial impression that you mean the ciphers the server uses to authenticate and the order it choses, and this is ADFS server?
Seriously, thank you again for following up and posting the solution
Darien