Unable to complete oAuth2 authentication, redirected to home page

germanfred

I seem to have everything set up correctly in Azure AD which is authorising and redirecting back to OSTicket homepage upon return:

Azure App Registration:

OSTicket oAuth Config:

Steps

Add new email Admin > Emails > Add New Email
Save Email address and Email name
Click Remote Mailbox
Complete hostname outlook.office365.com
Port: 993
Protocol IMAP
Authentication: oAuth2 - Microsoft
Click Config
Complete all fields and click submit
Complete authorisation with Microsoft and approve app to have access to requests data
Page redirects back to OSTicket homepage
Entering email admin again is requesting to "Configure Authentication"

Attempting to Authorise again results in a redirect back to the home page and authorisation never completing.

Help! 😀

germanfred

OK. After messing about and checking all of the scopes I found I had one missing from the API permissions.

I can now complete the authorisation but I can't active the email account. I just get an error both with IMAP and SMTP:

crodriguez

Good afternoon, it's been a while, but can you indicate if you were able to solve it?
What is the API permission that you were missing?
Our situation is the same as you point out, every time we try to validate it returns us to the home page.

ntozier

These two entries appear to be incorrect. (see red arrows I added to your Screen shot)

To see why search for Authorization/Token Endpoints
in the docs
https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

The quick fix is to replace the word "common" with your Tenant ID from Azure.
note: this looks like a uid or gid i.e. something like: 88888888-4444-4444-13#########13

aussied89

Wooooo i got mine working by doing the following, i feel like many of you are trying to do this from the configruing options within the plugin section. however when trying the setup from the remote mailbox it gave me the error i should have been looking at. the PEM cert for CURL.
https://stackoverflow.com/questions/29822686/curl-error-60-ssl-certificate-unable-to-get-local-issuer-certificate

after downloading the cacert.pem and changing the php.ini file to reflect its location it worked 🙂 and sso is working 🙂

hopefully this guides someone down the right path 🙂

mohdkasni

aussied89
How did you manage to do this?
How did you add Oauth, from email or plugin interface?

Where to get the cacert.pem?

Then I need to add these both path to the cacert.pem in php.ini?
curl.cainfo ="C:/DevPrograms/wamp64/bin/php/cacert.pem"
openssl.cafile="C:/DevPrograms/wamp64/bin/php/cacert.pem"