It is possible that when sending a simulation using the DMI sending method configured through Microsoft, a sending error may occur after a campaign has been launched.
If an alert icon appears in the Campaigns > Calendar section, you should check whether there was an error in delivering the simulation emails to the users.
For more details about the issue, go to Audit > Campaign Details.
There you will find a report listing the users who experienced errors, along with the corresponding description.
Most Common Sending Errors When Using DMI in Microsoft
| Error Description | Error Cause | Error Solution |
| 403, Forbidden: {'error': {'code': 'ErrorAccessDenied', 'message': 'Access is denied. Check credentials and try again.'}} | The registered application has not been granted consent for the required permissions. | 1 - Grant consent for the permissions as indicated in our setup guide. |
| Error to connect to Microsoft Graph API, verify the credentials | The configured secret key has expired, or the required Value was not entered correctly in the platform. |
2 -If the secret key has expired, create a new one and upload it to the platform. 3 - If it has not expired, recreate it and ensure the Value is entered correctly. |
| 404, Not Found: {'error': {'code': 'MailboxNotEnabledForRESTAPI', 'message': 'The mailbox is either inactive, soft-deleted, or is hosted on-premise.'}} | The user is inactive, deleted, on-premise, or unable to receive emails at this time. | Verify in EntraID that the user is active and enabled to receive emails. You may also apply solution 4. |
| 404, Not Found: {'error': {'code': 'ErrorInvalidUser', 'message': "The requested user 'usuario@otrodominio.com' is invalid."}} | The user does not belong to the domain where DMI was configured. | 4 - Temporarily change the sending method to SMARTFENSE Mail Server. |
Here you can find access to the installation guide:
Microsoft - Configuration Instructions for Direct Message Injection (DMI)
More Details on Each Solution
- Ensure that the registered application has been granted consent for all the required permissions. Follow the steps outlined in the installation guide to complete this process.
- If the configured secret key has expired, you must generate a new one in Microsoft Entra ID and upload it again to the platform.
-
If the secret key has not expired, recreate it and make sure to enter the Value Field correctly. Be sure to copy the Value at the time of the creation, since it will be only visible once. If you do not have it backed up, you must delete the current hey and generate a new one.
4. If the user does not belong to the domain where DMI was configured, it will not be possible to use this sending method. You must temporarily change the sending method by going to Settings > Simulations > Sending Method, and selecting SMARTFENSE Mail Server. The platform will then attempt to automatically resend the simulations. Once the simulations have been successfully sent, you can reconfigure DMI through Microsoft.