Exchange Online in App-only authentication mode: Error loading objects...

Interesting. A Google search found some entries pointing to a bug on the Microsoft side that seemed to appear at some point.

https://learn.microsoft.com/en-us/answers/questions/1295937/expired-or-invalid-pagination-request-default-expi

Did you already try to update the Exchange Online PowerShell module to the latest 3.6.0?

Feel free to contact support to see if there is a workaround for that in the Exchange Online Connector.

Hello Markus,

Thank you as always update to 3.6.0 solved the issue 

Update on this:
So after updating the Exchange Online Posh module to 3.6.0 the synchronization now works without issues.

But now proces O3E_UnifiedGroup_Update/Deactivate gets frozen:

Set-OneIMUnifiedGroupMembers
Parameters:
-identity 9a7f95c7-c825-4bbf-bd6d-fc1870e72a61
-Mode Modify
-AddItems @(ef175561-bee3-46d2-9e2b-43173c2f16fc)
-RemoveItems @()

2024-10-09 08:55:01.1190 ERROR (ProjectorEngine 073c05b6-cad1-4d74-8af4-760a212fbc76 Job 4545d98a-627a-40f1-9cbb-a2e11e54e406) : Error running synchronization step (UnifiedGroup) of synchronization configuration (Provisioning (Exchange Online Waternet Amsterdam) (Provisioning)). VI.Base.ViException: Error running synchronization step (UnifiedGroup) of synchronization configuration (Provisioning (Exchange Online Waternet Amsterdam) (Provisioning)). ---> VI.Base.ViException: Method (Update (Update)) could not be run successfully. ---> System.AggregateException: One or more errors occurred. ---> System.AggregateException: One or more errors occurred. ---> VI.Base.PowerShell.Runner.PipelineHasErrorsExeption: The following errors occured during execution:
|Microsoft.Exchange.Net.AAD.AADException|We failed to update the group mailbox. Please try again later.
at VI.Base.PowerShell.Runner.RunspaceUtils.Run(Runspace target, IPoshExecutionItem item, Int32 maxDeserDepth)

I will make support call for this.

This is documented here https://support.oneidentity.com/technical-documents/identity-manager/9.2.1/administration-guide-for-connecting-to-exchange-online/2#TOPIC-2201781

NOTE: Adding and editing O3EUnifiedGroups is not possible by app-only authentication. To use these permissions, authentication with a user account is required.

What it your advise in order to support adding/removing members to O3EUnifiedGroups.

Also from the guide:
NOTE: The user account used to access Exchange Online must not use multifactor authentication to allow automated logins in a user context

So when Microsoft enforces the mandatory use of MFA supporting O3EUnifiedGroups using OneIM's OOTB features will not be possible?
And you will need to build your own custom process and script targeting the Microsoft Graph API for supporting O3EUnifiedGroups?

What it your advise in order to support adding/removing members to O3EUnifiedGroups.

Also from the guide:
NOTE: The user account used to access Exchange Online must not use multifactor authentication to allow automated logins in a user context

So when Microsoft enforces the mandatory use of MFA supporting O3EUnifiedGroups using OneIM's OOTB features will not be possible?
And you will need to build your own custom process and script targeting the Microsoft Graph API for supporting O3EUnifiedGroups?

I advise contacting support about that matter. I currently have no further information for the current versions. I know that we will use the Graph API for the O3EUnifiedGroups in future versions.