429 Too Many Requests when obtaining OAuth2 access token using Client Credentials Grant (Microsoft Sentinel REST API Poller)

Hi everyone,

I have used Box Microsoft Sentinel Codeless Connector (CCP) connector which uses the REST API Poller to ingest Box Enterprise Events.

The connector authenticates using the Client Credentials Grant against the Box OAuth endpoint.

OAuth Endpoint

POST https://api.box.com/oauth2/token

Grant Type

client_credentials

Additional Parameters

box_subject_type=enterprise
box_subject_id=<Enterprise ID>

The connector configuration is similar to:

"auth": {
    "type": "OAuth2",
    "grantType": "client_credentials",
    "TokenEndpoint": "https://api.box.com/oauth2/token"
}

However, the connector consistently fails.

Microsoft Sentinel reports the following error:

RES40001

Invalid Credential or cannot get credential for example OAuth2 access token.

Call failed with status code 429 (Too Many Requests):
POST https://api.box.com/oauth2/token

Note that the credentials used are valid, Microsoft Sentinel Data Connector shows the following: