When trying to create a Microsoft 365 log source in Panther, the following error occurs:
Source Microsoft365 did not pass configuration check because: error acquiring token: FromClientSecret(): ... Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID
To resolve this issue:
Check whether you have entered the correct value in the client secret field. Make sure you are entering the secret value and not the secret ID into the client secret field.
This issue occurs when the incorrect secret value is entered for the Microsoft 365 token field. Microsoft labels things as secret ID, but the token actually requires the secret value.