OAuth redirecting to user portal not agents \scp page

mb84uk

Hello,

I am running several instances of OSTicket, 3 in total, 1 on its own IIS web server (Server 1) and 2 on the same IIS web server (server2), two servers in total.

On the server hosting the single instance, we are using OAuth to authenticate our agents against Microsoft Entra as described in the documentation. The click "Sign in with..." on the SCP landing page and everything works great.

On the shared server (server 2), one of the instances has been configured to also authenticate using the same OAuth setup (same company, different department), but once they authenticate, they get redirected to the customer portal where you can log a new ticket. Any ideas what could be causing this?

I have checked the OAuth setup in OSTicket Plugins and the details are all correct, the secrets and redirect URLS are unique to each instance, the idp attributes are the same.

Having done a bit of searching on this forum, it appears that it may be related to IIS URL Rewrite, this is enabled on both servers and they have identical rules, i dont really understand how this works so I am reluctant to change that without coming here first.

One the shared web server, my folder structure looks like this (its the osticket-HR site that I am working on)

Instance information

Thanks

KevinTheJedi

mb84uk

Check the user account in the _user_account table in the database and see if the backend column has a specific value. If so, set it to NULL and retest. You should also always clear any browser cache and cookies when going from one osTicket to the next.

Cheers.

mb84uk

Thanks for getting back to me, my ost_user_account table has zero rows. Do you mean the ost_staff table? If so, that has entries for all my agents, including the account I am testing with. The field for backend was empty, not (NULL). I have change this one to (NULL) but it has not had any effect on the problem. Any other ideas? I am testing this in a new Chrome incognito window each time to get around caching and cookie issues.

KevinTheJedi

mb84uk

Then likely something isn’t configured correctly within the app and/or plugin settings or the username/email doesn’t match your Agent’s username/email in osTicket.

Cheers.

KevinTheJedi

mb84uk

Also in IIS Manager on the shared server do you have an actual site configured for each instance/folder? If so, when you click on the site name in the left tree under Sites and the double click the URL Rewrite does it show the correct rewrites?

Cheers.