SKY API Error - Web App Unavailable - x-ms-forbidden-ip

Alex Wong · August 2023

Reporting a problem that just started on my 8/18/2023 9PM ET data warehouse sync.

Received a BUNCH of error message alerting me data warehouse sync is having error (Power Automate flow). The error I received is:

HTTP Status 403 Forbidden
Body:

<!DOCTYPE html>
<html>
<head>
<title>Web App - Unavailable</title>
<style type="text/css">
… deleted the styling code as it doesn't matter here
</style>
</head>
<body bgcolor="#00abec">
<div id="feature">
<div id="content">
<h1 id="unavailable">Error 403 - Forbidden</h1>
<p id="tryAgain">The web app you have attempted to reach has blocked your access.</p>
</div>
</div>
</body>
</html>

Header:

{
"x-ms-forbidden-ip": "20.88.153.194",
"Date": "Sat, 19 Aug 2023 01:24:05 GMT",
"Content-Length": "1892",
"Content-Type": "text/html"
}

The “action” that trigger this error is the Blackbaud Add-in > Send an HTTP Request. This is a GET request (I did not try if other HTTP method is problem or not, I presume it is also problem)

This is on my “Production Environment” on Power platform. If I go to another environment (potentially a different IP), this same action will WORK without issue.

I also try using an action that is from the Blackbaud NXT Constituent connector (list constituent) in the same “Production Environment” in the same exact flow. This action WORK without issue as well.

For now I can only pinpoint to running the Send an HTTP Request action on my Production Environment being the issue here.

Alex Wong · August 2023

@Ben Wong should I report to support?

Alex Wong · August 2023

Tracking Support Ticket: 019432586

Alex Wong · August 2023

@Alex Wong
Also finding out that not ONLY Send an HTTP Request action is blocked, Get Campaign Custom Fields is also getting same error.

Within the same flow, List campaigns in the Blackbaud Raisers Edge NXT Fundraising connector has no problem while List campaign custom fields in the same connector have the same error message, different IP address: 13.86.223.40

Looks like multiple Microsoft IP has been blocked?

9107aaf1713fd219b72a07554efbbd39-huge-im

ede21252712740a5ec654481d310afb5-huge-im

abe3d9d089f32d5ebeb4e92c84f9b1a9-huge-im

Andrew VanStee · August 2023

@Alex Wong
I just starting having the same issue with my flows using the HTTP Request starting yesterday.

Michael Tims · August 2023

Hi @Alex Wong - I'm sorry you are receiving this error in your production environment. First, I did want to check in and confirm that you still are seeing the issue today in your production environment?

We've been troubleshooting and looking at logs on the Blackbaud side, but it's not clear yet why the 403s are occurring as the affected requests don't make their way from the connector to SKY API (hence the “The web app you have attempted to reach has blocked your access” forbidden message).

There are some connector limits that are enforced within Power Automate, such as “500 requests per minute per connection”, but we don't believe that limit is being hit in your environment for your connections. You may hear back from Blackbaud Support soon, but I wanted to let you know we've reached out to Microsoft for additional support on this issue and will let you know when we have more information.

I appreciate your patience while we work towards a resolution!

Ben Wong · August 2023

@Alex Wong thanks for reporting this and opening a support ticket. As Michael said, we are working with the Microsoft Support team to look into the issue further. There is some additional information needed that I'll DM you for. Thanks!

Michael Tims · August 2023

Hi @Andrew VanStee and @Alex Wong - Microsoft has responded and stated that these access restriction issues were recently fixed on their end. Could you please retry your flows when you get a chance and let me know if they are successful? Thank you!

Alex Wong · August 2023

@Michael Tims
The test flow that was failing is now working.

I am not going to be able to turn on all my production data syncing flow as I'm out on vacation no access to computer. When I get back I'll do so and report back.

Thanks

Alex

Alex Wong · August 2023

@Michael Tims
My production flows for data sync are working since yesterday. So I would say the fix is good.

Thank you

SKY API Error - Web App Unavailable - x-ms-forbidden-ip

Comments

Categories