KevinTheJedi The Quest KACE isn't osTicket, it's an entirely different solution. I'm just saying that this works so I don't see how it can be our environment.
These are the configured permissions for OAUTH2 for KACE:
![](https://forum.osticket.com/assets/files/2022-11-26/1669422789-128547-image.png)
I added openid to the list of permissions for osTicket, but no joy.
![](https://forum.osticket.com/assets/files/2022-11-26/1669422932-30198-image.png)