Foxpass SCEP Errors and Troubleshooting

This document provides step-by-step instructions for resolving common SCEP-related errors encountered in Foxpass.

1. Expired Azure Secret

If you see a message like "Error while handling scep request - Azure verification error" under Last error column on the SCEP page then it might indicate that the client secret for the Azure application associated with Foxpass has expired. To resolve this, first check if your secret is expired and then you must generate a new client secret in Azure and update it in Foxpass.

Azure error

Azure error

Update the secret in Azure

  • Sign in with an account that has sufficient permissions to manage the Azure application.
  • Select App registrations.
App registrations

App registrations

  • Use the search bar to locate the application by its name. Under certificates and secrets column, look for the respective expired secret.

Look for expired secret

Look for expired secret

  • Select the application from the list.
  • Click on the value of Client credentials.
  • Delete the old secret/s.
Delete the old secret

Delete the old secret

  • Under the Client secrets section, click + New client secret.
Create new client secret

Create new client secret

  • Provide a description for the secret (e.g., Foxpass Integration Secret) and select an expiration period (e.g., 6 months, 12 months, or 24 months).
  • Click Add.
Create a secret

Create a secret

  • Copy the newly generated client secret value. This is displayed only once. Note: Please copy the secret value and not the secret ID.
Copy the secret value

Copy the secret value

📘

Important: Store the client secret value securely as it will not be displayed again. If lost, you will need to generate a new one.


Update the secret in Foxpass

  • Login and go to the SCEP page in Foxpass.
  • Go to your SCEP endpoint and click the three lined blue button.
  • Replace the expired client secret with the newly generated secret.
Replace the client secret

Replace the client secret

  • Click the Submit button.
  • Click on the small cross next to the error message.
Close the error message

Close the error message

SCEP error dismissed

SCEP error dismissed

2. Not sufficient permissions

If you see a message like "Error while handling scep request - Azure verification error" under Last error column on the SCEP page then it might indicate that you don't have sufficient permissions in Azure. Please verify and if needed, refer to the 'Add permissions' section of the Intune Initial Setup page to fix the error.


Test the Integration

  • Verify that the updated settings works by triggering a test SCEP request.
  • Ensure there are no errors in the logs.

This document will be continuously updated to include more common SCEP-related errors and their solutions. If you encounter other errors, please refer to this guide or contact Foxpass Support for assistance.