I've upgraded from 1.15 to 1.17 to resolve the Modern Authentication issue, and I'm trying to set up Oauth for staff and client logins.

I've followed the instructions in the Microsoft SSO guide to set up SSO for a single tenant and verified that the login is correct. However, after the SSO authentication is completed, instead of returning to the Agent control panel, I'm redirected to the default client instance.

My App registration in Azure has a redirect URI of https://helpdesk.domain/api/auth/oauth2.

My Oauth instance matches the Azure settings as per the guide referenced above.

I've checked the user attribute mapping fields in Graph Explorer and verified that the attributes and values match the values in the ost_staff table.

After attempting to log in using SSO, the browser appears to load for a few minutes, then redirects to the client home page.

URL redirection is enabled and appears to be working.

I can see the following in the IIS logs:
2022-10-31 05:26:31 172.20.3.20 GET /scp/ - 443 - 172.17.3.159 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/107.0.0.0+Safari/537.36 - 302 0 0 1210
2022-10-31 05:26:32 172.20.3.20 GET /scp/login.php - 443 - 172.17.3.159 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/107.0.0.0+Safari/537.36 - 422 0 0 1247
2022-10-31 05:26:37 172.20.3.20 GET /scp/login.php do=ext&bk=oauth2.agent.p5i6 443 - 172.17.3.159 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/107.0.0.0+Safari/537.36 https://helpdesk.domain/scp/login.php 302 0 0 1186
2022-10-31 05:29:02 172.20.3.20 GET /api/auth/oauth2 code=0.AWcAE_ldsYXn6ka9uETZYbW0kZe-kMJgHqdHoy_GKN8azIZBAAE.[truncated]&state=47c573507ef2ea61c30690*******&session_state=34756337---*-c65fc1fd8efc 443 - 172.17.3.159 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/107.0.0.0+Safari/537.36 https://helpdesk.domain/ 302 0 0 145216
2022-10-31 05:29:04 172.20.3.20 GET / - 443 - 172.17.3.159 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/107.0.0.0+Safari/537.36 https://helpdesk.domain/ 200 0 0 1250

It seems that the SSO is working and returning a token. osTicket is then redirecting to the root instead of /scp.

I have spent the entire day browsing through the forums looking for related topics. I've found a few related discussions, but none seem to have a solution.

Any assistance is appreciated.