An Azure search service with built-in artificial intelligence capabilities that enrich information to help identify and explore relevant content at scale.
Found a fix for the issue, making "federatedIdentityClientId": "" in the datasource json fixed the issue. In the example below the application_id is the enterprise application with Sites.Selected.
"No such host is known" was never a DNS/networking problem at all — it's very likely a bug in this specific preview API's (2026-05-01-preview) federated-token-exchange code path when FederatedCredentialApplicationId/federatedIdentityClientId is explicitly populated: something in that path was failing before the connector even got to actually resolving abc.sharepoint.com, and the generic/misleading "No such host is known." was masking an internal failure in Microsoft's own connector, not a real DNS lookup. Omitting the field makes the connector fall back to resolving the identity implicitly, which apparently exercises a different (working) code path.
{
"@odata.context": "https://<your-search-service>.search.windows.net/$metadata#datasources/$entity",
"@odata.etag": "\"<etag>\"",
"name": "ds-example-whatever-dev",
"description": "Example SharePoint source: whatever",
"type": "sharepoint",
"subtype": null,
"indexerPermissionOptions": [],
"credentials": {
"connectionString": "SharePointOnlineEndpoint=https://<your-tenant>.sharepoint.com/sites/<YourSiteName>;ApplicationId=<application-id-guid>;TenantId=<tenant-id-guid>;"
},
"container": {
"name": "useQuery",
"query": "includeLibrary=https://<your-tenant>.sharepoint.com/sites/<YourSiteName>/Shared%20Documents"
},
"dataChangeDetectionPolicy": null,
"dataDeletionDetectionPolicy": null,
"encryptionKey": null,
"identity": {
"@odata.type": "#Microsoft.Azure.Search.DataUserAssignedIdentity",
"userAssignedIdentity": "/subscriptions/<subscription-id-guid>/resourceGroups/<your-resource-group>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<your-managed-identity>",
"federatedIdentityClientId": ""
}
}