Unable to establish OAuth2 (Microsoft) Connection

JustBytes

I've been getting this error message. I can't find anything in google. Has anyone seen this before?

array ( 'code' => 'NoUserFoundWithGivenClaims', 'message' => 'The user specified by the user-context in the token does not exist.', 'innerError' => array ( 'oAuthEventOperationId' => 'e1ba3449-b445-4ba8-918f-d510ebd92a6f', 'oAuthEventcV' => 'UnQ25/RdrolLhDfdYAstZA.1.1', 'errorUrl' => 'https://aka.ms/autherrors#error-InvalidUser', 'requestId' => 'e7367452-5df4-89ae-4b84-37dd600b2d64', 'date' => '2024-08-17T03:49:56', ), )

KevinTheJedi

JustBytes

Haven’t seen that one before. Doing some sleuthing I found this that might help:

https://learn.microsoft.com/en-us/troubleshoot/dynamics-365/sales/exception-when-using-server-side-sync

Cheers.

JustBytes

KevinTheJedi Also, this is for GCCHigh environment - not sure if I have the correct resource details endpoint URL.

JustBytes

Thanks Kevin, but this didn't work. I've also tried basic authentication but I'm getting a different error "invalid credentials".

KevinTheJedi

JustBytes

Ahh yea that’s an issue. The general rules for GCC environments are:

All endpoints end in .us instead of .com.
The Resource Details Endpoint is https://outlook.office365.us/api/v2.0/me.
SMTP is usually disabled by default and most people use the SMTP-Relay instead.

Cheers.

JustBytes

Update:

I have updated the Resource Details Endpoint and now I get the following error message:

cURL error 35: error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://outlook.office.us/api/v2.0/me

KevinTheJedi

JustBytes

Seems like maybe you are using an outdated version of cURL or maybe an SSL protocol issue (like using outdated version of OpenSSL on the server)?

https://stackoverflow.com/questions/29808030/curl-error-35-error14077458ssl-routinesssl23-get-server-hellotlsv1-unreco

Cheers.

JustBytes

KevinTheJedi I have tried everything in my book and I can't get this to work. I'm running the latest version of cURL and have reinstalled OpenSSL a few times. I'm also using DIGICert - not sure if this is an issue.

KevinTheJedi

JustBytes

At this point I would recommend contacting your hosting provider/server admin and/or O365 admin for further assistance as this isn’t an osTicket issue rather a host/setup/provider issue.

Cheers.