When I click "Show users in the tenant" and log in, I still get a 403 error ava.io.IOException: Server returned HTTP response code: 403 for URL: https://graph.microsoft.com/v1.0/users.
I think I've done everything from the instructions. In the portal, API permissions, I added Microsoft Graph Application permission for Directory.Read.All, and Granted admin consent for Default Directory so there's a green checkbox.
If I go to the owners page, I am the app owner, and I have role Global Administrator in my tenant.
The few things I'm not sure about: in web.xml, where we enter the tenant, the tenant can't possibly be the crazy Directory(tenant) ID which looks like a client ID or client secret, but the tenant is instead a value likely ending in onmicrosoft.com?
Also, I don't have a place for a sign-on URL or App ID URI in Azure...not sure if this is playing a role.
In the Authentication Tab of the App registration, I don't need any implicit grant selection (Access tokens or ID tokens), and under Default client type, I should NOT treat application as a public client (since this is required where a redirect URI is not used)?
Any other ideas?
Thanks so much,
Sam