MS365 OAuth2: What Is Needed on MS365 Enterprise App side for this to work?

teward001

So, there's conflicting information across the board here, so I need information here.

There's two problems at play:
1) MIcrosoft 365 is retiring the Outlook API.
2) Proper configuration of MS365 Application side of things

There's zero documentation on setting up the Enterprise Application side of MS365 for OAuth2 to work. Coupled with the issue that you require mail match with the UPN for authentication, it breaks when the application requires admin consent to use - and a known issue is that sometimes Enterprise applications cannot be consented to by standard users.

So, what's the proper way to configure the MS365 side of things to get OAuth2 + Microsoft 365 + IMAP working properly with osTicket?

KevinTheJedi

teward001

There are many threads on this already, but you can follow the documentation below:

https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

If the prompt=consent is causing issues then you can remove it manually. We are making this option configurable eventually.

Cheers.

teward001

KevinTheJedi Remove it manually where? This isn't listed anywhere. Do I have to extract the phar and alter your code?

KevinTheJedi

teward001

Yes.

Cheers.

teward001

KevinTheJedi You might want to consider having the team bump that configuration object much higher on your priority tree here at OSTicket. This prompt request, when removed, allowed OAuth to work without admin auth when admin authentication was provided.

I don't want to have to go through the hassle of un-PHARing and rePHARing every time.

KevinTheJedi

teward001

It's on our todo list. Stay tuned!

Cheers.

teward001

@KevinTheJedi do you mind if I share the modified phar file here, in case someone else runs into this problem and needs a phar that doesn't include the prompt=consent argument for MS365?

KevinTheJedi

teward001

We wouldn’t be able to trust that. I would post a diff of what you changed and then people can simply download the raw plugin files from GitHub and apply your diff.

Cheers.

teward001

KevinTheJedi Would have been better to provide the GH link then instead of saying "edit the phar" then earlier. https://github.com/osTicket/osTicket-plugins/pull/241 is a PR for this

Alternatively, release a modified version of the PHAR yourselves until you guys get the configurable prompt option as an option.