Unable to get M365 OAUTH2 authentication working

NavyDavy

I have successfully installed osTicket on a Windows server with the Oauth client with the following details:
osTicket Version v1.18.1 (0375576)
Operating System: Windows Server 2022 v21H2 (OS Build 20348.2322)
Web Server Software Microsoft-IIS/10.0
MySQL Version 10.11.6
PHP Version 8.2.15 non-thread-safe
I have configured the Microsoft OAUTH as per the authentication instruction for use with including agents. When I attempt to log in the authentication seems to be working as I correctly get my MFA but when I use that (authenticator app) I am dropped back to the login screen not as the agent I created for it. Auto-create doesn't work either for a standard user even though that option is enabled but I can manually create a user without a problem. My logs don't show anything obvious.

KevinTheJedi

NavyDavy

You need to first make sure the URL Rewrite module is installed in IIS and enabled for the site. Next you need to make sure you install the cURL root certificate on the server and update your PHP INI setting called curl.cainfo to add the full path to the certificate. Windows servers are horrible for PHP applications these days. You have do do a lot of things manually such as this.

Reference:

https://martinsblog.dk/windows-iis-with-php-curl-60-ssl-certificate-problem-unable-to-get-local-issuer-certificate/

Cheers.

NavyDavy

Much appreciated, I had installed without using the Web Platform Installer as it is deprecated but I did have the rewrite module already installed. The Curl certificate addition was all I need although I ended up deleting the OAUTH instance and recreating it as just restarting IIS or the server itself wasn't enough. We have two separate M365 instances working happily in testing now.