[GH-ISSUE #813] BUG: 500 errors during offboarding process - No 'Access-Control-Allow-Origin' header is present on the requested resource. #409

Closed
opened 2026-03-02 12:41:59 +03:00 by kerem · 3 comments
Owner

Originally created by @SuburbanTotoro on GitHub (Mar 8, 2022).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/813

Describe the bug
During Step 4 of the offboarding process, "request failed with status code 500" appears and all steps appear to fail. No actions appear to occur, and manual offboarding is required.

To Reproduce
Steps to reproduce the behavior:

  1. Identity management -> Offboarding Wizard
  2. Select a tenant, user, offboarding settings
  3. Review and confirm
  4. Confirm and "request failed with status code 500" appears and steps do not complete

Expected behavior
The expected behavior is that the offboarding wizard completes the offboarding task.

Screenshots
offboard

Desktop (please complete the following information):

  • OS: Windows 11 with Februrary 2022 rollup applied
  • Browser Edge
  • Version ~99.0.1150.30

Additional context
The console is returning this error:

/identity/reports/azure-ad-connect-report?customerId=ac9f8972-f339-4d51-9a5d-aa8a57c226cf:1

Access to manifest at '[https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=H8bG10QpTFYkDQhU%2bTp%2fRbHf2o%2b0qMpa%2bSIglRcJGi44d6awxIBkZ00ukbqQR%2fQi2zSJiZ1m4g3JiohrDQmAGaw0wVDmgou4l4COYr7Rv8UVHxH228gvOBAixQ5MvfH5&functionKeyVersion=0'](https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=H8bG10QpTFYkDQhU%2bTp%2fRbHf2o%2b0qMpa%2bSIglRcJGi44d6awxIBkZ00ukbqQR%2fQi2zSJiZ1m4g3JiohrDQmAGaw0wVDmgou4l4COYr7Rv8UVHxH228gvOBAixQ5MvfH5&functionKeyVersion=0%27) (redirected from '[https://cipp.genuine.network/manifest.json')](https://cipp.genuine.network/manifest.json%27)) from origin '[https://cipp.genuine.network']() has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=H8bG10QpTFYkDQhU%2bTp%2fRbHf2o%2b0qMpa%2bSIglRcJGi44d6awxIBkZ00ukbqQR%2fQi2zSJiZ1m4g3JiohrDQmAGaw0wVDmgou4l4COYr7Rv8UVHxH228gvOBAixQ5MvfH5&functionKeyVersion=0:1

Failed to load resource: net::ERR_FAILED
users:1

Access to internal resource at '[https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=hTYXuNosX6HGsyyVZq72twc0taztZxcQrhhEGQ2Bn9qTFkNwSWhdLvaWgDudDN8HY3jVNmiDkH6m459GelzVhDy4oLHEHeC0LyOAOe6Kb%2fMP7G97izD%2fsIZ3TYGa03CJ&functionKeyVersion=0'](https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=hTYXuNosX6HGsyyVZq72twc0taztZxcQrhhEGQ2Bn9qTFkNwSWhdLvaWgDudDN8HY3jVNmiDkH6m459GelzVhDy4oLHEHeC0LyOAOe6Kb%2fMP7G97izD%2fsIZ3TYGa03CJ&functionKeyVersion=0%27) (redirected from '[https://cipp.genuine.network/manifest.json')](https://cipp.genuine.network/manifest.json%27)) from origin '[https://cipp.genuine.network']() has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource
Originally created by @SuburbanTotoro on GitHub (Mar 8, 2022). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/813 **Describe the bug** During Step 4 of the offboarding process, "request failed with status code 500" appears and all steps appear to fail. No actions appear to occur, and manual offboarding is required. **To Reproduce** Steps to reproduce the behavior: 1. Identity management -> Offboarding Wizard 2. Select a tenant, user, offboarding settings 3. Review and confirm 4. Confirm and "request failed with status code 500" appears and steps do not complete **Expected behavior** The expected behavior is that the offboarding wizard completes the offboarding task. **Screenshots** <img width="724" alt="offboard" src="https://user-images.githubusercontent.com/96153222/157304387-46c5c1b6-199b-4428-9b8b-5691f7d12349.png"> **Desktop (please complete the following information):** - OS: Windows 11 with Februrary 2022 rollup applied - Browser Edge - Version ~99.0.1150.30 **Additional context** The console is returning this error: ``` /identity/reports/azure-ad-connect-report?customerId=ac9f8972-f339-4d51-9a5d-aa8a57c226cf:1 Access to manifest at '[https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=H8bG10QpTFYkDQhU%2bTp%2fRbHf2o%2b0qMpa%2bSIglRcJGi44d6awxIBkZ00ukbqQR%2fQi2zSJiZ1m4g3JiohrDQmAGaw0wVDmgou4l4COYr7Rv8UVHxH228gvOBAixQ5MvfH5&functionKeyVersion=0'](https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=H8bG10QpTFYkDQhU%2bTp%2fRbHf2o%2b0qMpa%2bSIglRcJGi44d6awxIBkZ00ukbqQR%2fQi2zSJiZ1m4g3JiohrDQmAGaw0wVDmgou4l4COYr7Rv8UVHxH228gvOBAixQ5MvfH5&functionKeyVersion=0%27) (redirected from '[https://cipp.genuine.network/manifest.json')](https://cipp.genuine.network/manifest.json%27)) from origin '[https://cipp.genuine.network']() has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=H8bG10QpTFYkDQhU%2bTp%2fRbHf2o%2b0qMpa%2bSIglRcJGi44d6awxIBkZ00ukbqQR%2fQi2zSJiZ1m4g3JiohrDQmAGaw0wVDmgou4l4COYr7Rv8UVHxH228gvOBAixQ5MvfH5&functionKeyVersion=0:1 Failed to load resource: net::ERR_FAILED users:1 Access to internal resource at '[https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=hTYXuNosX6HGsyyVZq72twc0taztZxcQrhhEGQ2Bn9qTFkNwSWhdLvaWgDudDN8HY3jVNmiDkH6m459GelzVhDy4oLHEHeC0LyOAOe6Kb%2fMP7G97izD%2fsIZ3TYGa03CJ&functionKeyVersion=0'](https://identity.azurestaticapps.net/.redirect/aad?hostName=cipp.genuine.network&staticWebAppsAuthNonce=hTYXuNosX6HGsyyVZq72twc0taztZxcQrhhEGQ2Bn9qTFkNwSWhdLvaWgDudDN8HY3jVNmiDkH6m459GelzVhDy4oLHEHeC0LyOAOe6Kb%2fMP7G97izD%2fsIZ3TYGa03CJ&functionKeyVersion=0%27) (redirected from '[https://cipp.genuine.network/manifest.json')](https://cipp.genuine.network/manifest.json%27)) from origin '[https://cipp.genuine.network']() has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource ```
kerem 2026-03-02 12:41:59 +03:00
Author
Owner

@KelvinTegelaar commented on GitHub (Mar 8, 2022):

CORS is never an issue, and you can ignore that.

Your issue most likely is related to the access token, most tasks there use the Exchange token. Perform an accces check for that tenant to see if its working.

Small note; currently half of the internet is offline due to server disruptions, might also be related to that if this is the only error.

<!-- gh-comment-id:1062094249 --> @KelvinTegelaar commented on GitHub (Mar 8, 2022): CORS is never an issue, and you can ignore that. Your issue most likely is related to the access token, most tasks there use the Exchange token. Perform an accces check for that tenant to see if its working. Small note; currently half of the internet is offline due to server disruptions, might also be related to that if this is the only error.
Author
Owner

@SuburbanTotoro commented on GitHub (Mar 9, 2022):

Thank you very much Kevin, running the tenant access check shows an error I know how to deal with:
Failed to connect to Exchange: AADSTS50078: Presented multi-factor authentication has expired due to policies configured by your administrator, you must refresh your multi-factor authentication to access '00000002-0000-0ff1-ce00-000000000000'. Trace ID: a3e7f991-dfdf-4b80-bb05-53dfd3eac200 Correlation ID: efe767bb-c6a9-4eeb-8109-e9a4bbb9a37d Timestamp: 2022-03-09 16:58:02Z

I hope you have a great day and really appreciate such a quick response to this,
Benjamin Sanchez​
Senior Automation Engineer

T:
971-288-0880tel:9712880880
E:
@.@.>
W:
https://genuinetechnology.comhttps://genuinetechnology.com/
[Genuine Technology Logo]https://genuinetechnology.com/

Please help us serve you! Send all requests through the 24/7 support team:

​​Email: @.*** @.***>
​Phone: 9tel:971888891171-888-8911tel:9718888911

https://mygenuine.tech/Requests made directly to individual staff may ​have a significantly delayed response ​and do not have SLA guarantees

From: KelvinTegelaar @.>
Sent: Tuesday, March 8, 2022 10:49 AM
To: KelvinTegelaar/CIPP @.
>
Cc: Benjamin Sanchez @.>; Author @.>
Subject: Re: [KelvinTegelaar/CIPP] BUG: 500 errors during offboarding process - No 'Access-Control-Allow-Origin' header is present on the requested resource. (Issue #813)

CORS is never an issue, and you can ignore that.

Your issue most likely is related to the access token, most tasks there use the Exchange token. Perform an accces check for that tenant to see if its working.

Small note; currently half of the internet is offline due to server disruptions, might also be related to that if this is the only error.


Reply to this email directly, view it on GitHubhttps://github.com/KelvinTegelaar/CIPP/issues/813#issuecomment-1062094249, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AW5S5BW2TLYLYU3HZATMTYTU66OJZANCNFSM5QHF2NBA.
Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.
You are receiving this because you authored the thread.Message ID: @.@.>>

<!-- gh-comment-id:1063147116 --> @SuburbanTotoro commented on GitHub (Mar 9, 2022): Thank you very much Kevin, running the tenant access check shows an error I know how to deal with: Failed to connect to Exchange: AADSTS50078: Presented multi-factor authentication has expired due to policies configured by your administrator, you must refresh your multi-factor authentication to access '00000002-0000-0ff1-ce00-000000000000'. Trace ID: a3e7f991-dfdf-4b80-bb05-53dfd3eac200 Correlation ID: efe767bb-c6a9-4eeb-8109-e9a4bbb9a37d Timestamp: 2022-03-09 16:58:02Z I hope you have a great day and really appreciate such a quick response to this, Benjamin Sanchez​ Senior Automation Engineer T: 971-288-0880<tel:9712880880> E: ***@***.******@***.***> W: https://genuinetechnology.com<https://genuinetechnology.com/> [Genuine Technology Logo]<https://genuinetechnology.com/> Please help us serve you! Send all requests through the 24/7 support team: ​​Email: ***@***.*** ***@***.***> ​Phone: 9<tel:9718888911>71-888-8911<tel:9718888911> ​ ​<https://mygenuine.tech/>Requests made directly to individual staff may ​have a significantly delayed response ​and do not have SLA guarantees ​ From: KelvinTegelaar ***@***.***> Sent: Tuesday, March 8, 2022 10:49 AM To: KelvinTegelaar/CIPP ***@***.***> Cc: Benjamin Sanchez ***@***.***>; Author ***@***.***> Subject: Re: [KelvinTegelaar/CIPP] BUG: 500 errors during offboarding process - No 'Access-Control-Allow-Origin' header is present on the requested resource. (Issue #813) CORS is never an issue, and you can ignore that. Your issue most likely is related to the access token, most tasks there use the Exchange token. Perform an accces check for that tenant to see if its working. Small note; currently half of the internet is offline due to server disruptions, might also be related to that if this is the only error. — Reply to this email directly, view it on GitHub<https://github.com/KelvinTegelaar/CIPP/issues/813#issuecomment-1062094249>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AW5S5BW2TLYLYU3HZATMTYTU66OJZANCNFSM5QHF2NBA>. Triage notifications on the go with GitHub Mobile for iOS<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you authored the thread.Message ID: ***@***.******@***.***>>
Author
Owner

@KelvinTegelaar commented on GitHub (Mar 11, 2022):

So fixed :) Will try to have somewhat clearer error messages in a future version too to show its an access token issue.

<!-- gh-comment-id:1065081439 --> @KelvinTegelaar commented on GitHub (Mar 11, 2022): So fixed :) Will try to have somewhat clearer error messages in a future version too to show its an access token issue.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/CIPP#409
No description provided.