Advanced Search
Search Results
100 total results found
OKTA003 - Okta TLS/SSL Certificate Error
Agent error code #OKTA003 indicates that the agent's TLS handshake with the configured Okta domain failed. The certificate presented by the endpoint could not be verified against the system trust store. This error is distinct from connection failures (#OKTA000...
OKTA004 - Okta Connection Timed Out
Agent error code #OKTA004 indicates that a request to the configured Okta domain did not complete within the agent's HTTP timeout. This error is distinct from connection failures (#OKTA000), which mean the connection never established at all. Error #OKTA004 me...
OKTA005 - Okta API Rate Limit Exceeded
Agent error code #OKTA005 indicates that Okta rejected the request with HTTP 429 Too Many Requests. The agent has hit the per-org rate limit on the network-zones API. Okta publishes its rate limits at Okta rate limits. The network-zones endpoint shares a bucke...
OKTA050 - Failed to Get Okta Network Zone
Agent error code #OKTA050 indicates that the agent could not retrieve the configured network zone from Okta. The request reached Okta and authenticated successfully, but Okta returned an unexpected status (other than the 404 case covered by #OKTA052). Common c...
OKTA051 - Failed to Update Okta Network Zone
Agent error code #OKTA051 indicates that the agent retrieved the network zone successfully but the PUT to update its gateways was rejected by Okta. This is distinct from authentication failures (#OKTA001) and authorization failures (#OKTA002). At this point Ok...
OKTA052 - Okta Network Zone Not Found
Agent error code #OKTA052 indicates that Okta returned HTTP 404 for the configured Network Zone ID. The Knocknoc backend points at a network zone that no longer exists in the org. Common causes include: The network zone was deleted in the Okta admin console T...
OKTA053 - Okta Network Zone Is Not an IP Zone
Agent error code #OKTA053 indicates that the configured network zone exists, but its type is not IP. Knocknoc only manages IP zones. Dynamic zones (geolocation, ASN, anonymiser) and policy-network zones are not supported. Common causes include: The zone was c...
OKTA054 - Invalid or Unexpected Response from Okta
Agent error code #OKTA054 indicates that Okta returned a 2xx status, but the response body did not match the expected schema. The agent could not decode the network-zone response. This error is rare. It usually points at something sitting between the agent and...
ENTRA000 - Failed to Connect to Microsoft Graph
Agent error code #ENTRA000 indicates that the agent could not reach Microsoft Graph at https://graph.microsoft.com. The request failed before any authentication or Named Location operation could take place. This error is distinct from authentication failures (...
ENTRA001 - Microsoft Entra Authentication Failed
Agent error code #ENTRA001 indicates that the Microsoft identity platform rejected the credentials provided by the agent during the client-credentials token request. The login endpoint returned an invalid_client or equivalent error. This error is distinct from...
ENTRA002 - Microsoft Entra Authorization Failed
Agent error code #ENTRA002 indicates that the agent authenticated to Entra ID successfully but Microsoft Graph rejected the Named Location request with HTTP 403 Forbidden. The app registration is missing the application permission required to read and write Co...
ENTRA003 - Microsoft Graph TLS/SSL Certificate Error
Agent error code #ENTRA003 indicates that the agent's TLS handshake with login.microsoftonline.com or graph.microsoft.com failed. The certificate presented by the endpoint could not be verified against the system trust store. This error is distinct from connec...
ENTRA004 - Microsoft Graph Connection Timed Out
Agent error code #ENTRA004 indicates that a request to login.microsoftonline.com or graph.microsoft.com did not complete within the agent's HTTP timeout (25 seconds). This error is distinct from connection failures (#ENTRA000), which mean the connection never ...
ENTRA005 - Microsoft Graph API Throttled
Agent error code #ENTRA005 indicates that Microsoft Graph rejected the request with HTTP 429 Too Many Requests. The agent has hit the per-tenant or per-app rate limit on the Conditional Access API. Microsoft Graph publishes its throttling thresholds at Microso...
ENTRA050 - Failed to Get Entra Named Location
Agent error code #ENTRA050 indicates that the agent could not retrieve the configured Named Location from Microsoft Graph. The request reached Graph and authenticated successfully, but Graph returned an unexpected status (other than the 404 case covered by #EN...
ENTRA051 - Failed to Update Entra Named Location
Agent error code #ENTRA051 indicates that the agent retrieved the Named Location successfully but the PATCH to update its ipRanges was rejected by Microsoft Graph. This is distinct from authentication failures (#ENTRA001) and authorization failures (#ENTRA002)...
ENTRA052 - Entra Named Location Not Found
Agent error code #ENTRA052 indicates that Microsoft Graph returned HTTP 404 for the configured Named Location ID. The Knocknoc backend points at a Named Location that no longer exists in the tenant. Common causes include: The Named Location was deleted in the...
ENTRA053 - Entra Named Location Is Not an IP-Based Location
Agent error code #ENTRA053 indicates that the configured Named Location exists, but its @odata.type is not #microsoft.graph.ipNamedLocation. Knocknoc only manages IP-based Named Locations. Country-based and unknown-region Named Locations are not supported. Com...