Importing into CIPP

[RaddoLaboc]

I was importing policies into CIPP yesterday when suddenly I could no longer import any. The only thing I noticed there was an update yesterday just before I imported the second half. Is it possible the updates yesterday have broken the imports?

[j0eyv]

Hi,

The policies have been modified a bit (just JSON data) to optimize the import process directly in the portal or via the IntuneManagementTool. There are no changes in terms of policy modifications. Could you test by using one of those methods and give me more detailed information about the issues while importing in CIPP?

[LabocSupport]

Thanks!

I have tried using the IntuneManagementTool, no issues there. When I import using CIPP, the groups come in but the Conditional Access Policies do not import into CIPP anymore. I managed to import an old version into CIPP no problem, but since the update they no longer import. I can only assume the removal of the code has thrown CIPP out. The annoying thing I was testing CIPP and I managed to import half of the policies before the update and after the update they wouldn't come in so I rebuilt CIPP thinking it was something I had done but now someone else has confirmed the same issue. Groups import but not the CA policies.

[j0eyv]

The following data has been removed from the JSON as this (sometimes) resulted in errors while importing via IntuneManagementTool:

    "id",
    "createdDateTime",
    "modifiedDateTime",
    "@odata.context",
    "@odata.etag"

I think you have a few options:

1. If you open the policy history in Github you can find the original contents. Download the previous version and try this in CIPP. Example: https://github.com/j0eyv/ConditionalAccessBaseline/blob/d2c889f7f9ab48416bd79e16b29528ac996fcfe3/Config/ConditionalAccess/CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA.json

2. Import all policies via IntuneManagement and export them once again. They should now contain the missing data which is probably required by CIPP.

[Pukkahq]

If its any help when we run the import in CIPP this is the error we are seeing

Template CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA created
Template CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist created
Template CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication created
Template CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA created
Template CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows created
Template CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload created
Template CA006-Global-DataProtection-Office365-iOSenAndroid-RequireAppProtection created
Template CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA created
Template CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA created
Template CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency created
Template CA103-Admins-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser created
Template CA104-Admins-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation created
Template CA105-Admins-IdentityProtection-AnyApp-AnyPlatform-PhishingResistantMFA created
Template CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA created
Template CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRiskUser created
Template CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices created
Template CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA created
Template CA204-Internals-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUnknownPlatforms created
Template CA205-Internals-BaseProtection-AnyApp-Windows-CompliantorAADHJ created
Template CA206-Internals-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser created
Template CA207-Internals-AttackSurfaceReduction-SelectedApps-AnyPlatform-BLOCK created
Template CA208-Internals-BaseProtection-AnyApp-MacOS-Compliant created
Template CA209-Internals-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation created
Template CA210-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRiskSignIn created
Template CA300-ServiceAccounts-IdentityProtection-AnyApp-AnyPlatform-MFA created
Template CA301-ServiceAccounts-AttackSurfaceReduction-AllApps-AnyPlatform-BlockUntrustedLocations created
Template CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA created
Template CA401-GuestUsers-AttackSurfaceReduction-AllApps-AnyPlatform-BlockNonGuestAppAccess created
Template CA402-GuestUsers-IdentityProtection-AllApps-AnyPlatform-SigninFrequency created
Template CA403-GuestUsers-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser created
Template CA404-GuestUsers-AttackSurfaceReduction-SelectedApps-AnyPlatform-BLOCK created
Template APP_Microsoft365_E5 created
Template APP_Microsoft365_E5_Dev created
Template CA-BreakGlassAccounts - Exclude created
Template CA-ServiceAccounts created
Template CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude created
Template CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist - Exclude created
Template CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication - Exclude created
Template CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA - Exclude created
Template CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows - Exclude created
Template CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload - Exclude created
Template CA006-Global-DataProtection-Office365-iOSenAndroid-RequireAppProtection - Exclude created
Template CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA - Exclude created
Template CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA - Exclude created
Template CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency - Exclude created
Template CA103-Admins-IdentityProtection-AllApps-AnyPlatform-PersistentBrowser - Exclude created
Template CA104-Admins-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation - Exclude created
Template CA105-Admins-IdentityProtection-AnyApp-AnyPlatform-PhishingResistantMFA - Exclude created
Failed to get data from community repo j0eyv/ConditionalAccessBaseline. Error: Resource temporarily unavailable (cippy.azurewebsites.net:443)

[j0eyv]

If its any help when we run the import in CIPP this is the error we are seeing

Failed to get data from community repo j0eyv/ConditionalAccessBaseline. Error: Resource temporarily unavailable (cippy.azurewebsites.net:443)

Based on the error message, this seems more like a GitHub issue rather than a repository or data issue.

[Pukkahq]

I have just been manually importing each of the rules via CIPP. The groups create ok but the CA policys say imported ok but does not show. so I wonder if they is a format error?

Its outside my tech area so will wait for someone smarter.

[j0eyv]

I have just been manually importing each of the rules via CIPP. The groups create ok but the CA policys say imported ok but does not show. so I wonder if they is a format error?

Its outside my tech area so will wait for someone smarter.

You might want to take a look at this reply: #19 (comment)

[LabocSupport]

Sorry for so long to replay, been a bit manic.

I have manually imported the baselines as per @j0eyv guidance and its working how I wanted. Just typical it started mid way through working and it tainted the experience a bit but these things happen!

Thanks for the help.