topic Re: 'Failed to parse JSON object from response' while integrating Microsoft Defender for Cloud Apps with XSOAR in Cortex XSOAR Discussions

'Failed to parse JSON object from response' while integrating Microsoft Defender for Cloud Apps with XSOAR

DP696 — Thu, 16 Feb 2023 10:27:11 GMT

Hi,

I encountered the error 'Failed to parse json object from response: b'\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights reserved.' when trying to integrate 'Microsoft Defender for Cloud Apps' using client credentials authentication method with XSOAR. Can someone help me to fix the issue. Since its an OOTB integration I believe there is no issue with the code.

Thanks in advance.

Re: 'Failed to parse JSON object from response' while integrating Microsoft Defender for Cloud Apps with XSOAR

chrking — Fri, 17 Feb 2023 02:09:15 GMT

Based on the error, it looks like you're getting a HTML response rather than JSON. That might mean your URL is incorrect, but it's hard to say for sure.

You can also get more detailed information about the API request/response by using the debug-mode=true argument on the command you're running.

Re: 'Failed to parse JSON object from response' while integrating Microsoft Defender for Cloud Apps with XSOAR

DP696 — Thu, 23 Feb 2023 08:05:01 GMT

Hi,
do you know from where we can get the right MCAS URL?

we collected by using the following way, still the error is not resolved.
1. In the Defender for Cloud Apps portal, select the question mark icon in the menu bar. Then, select About.
2. In the Defender for Cloud Apps about screen, you can see the portal url.

Thanks

Re: 'Failed to parse JSON object from response' while integrating Microsoft Defender for Cloud Apps with XSOAR

chrking — Fri, 24 Feb 2023 08:55:58 GMT

That looks right according to the documentation, so unfortunately I think this is going to be hard to debug without the debug logs.

When run with debug-mode=true you should get a log file created in the incident where you ran the command that contains the full request/response contents as well as curl commands so that you can test them yourself.

Integrations should, in theory, provide the error message from the server to the person using the integration but this doesn't always work as expected (especially when the response is in an unexpected format), so the debug logs can help with that.

If the page is an error response of some kind the page should hopefully provide more details on what the problem is and how you can fix it.