Emails Not Creating Tickets in osTicket After Microsoft Email Authentication

KevinTheJedi

Look at the resource owner. It does not match the email in question. You need to use the email itself to authenticate.

Cheers.

nadeem9810

Could you please clarify what you mean? I'm having trouble understanding and would appreciate your guidance on what exactly needs to be changed.

nadeem9810

KevinTheJedi Please reply I have receive below token details after successfully authentication:

KevinTheJedi

nadeem9810

In your above screenshot of the token the Resource Owner is “live.comp…@outlook.com” (can’t see the full thing as it’s censored). The Resource Owner needs to be the email you are configuring in osTicket - in this case “parahittech@outlook.com”. Delete the current token via the button in the Authentication popup, resubmit the popup, and when you are brought to Microsoft you login as “parahittech@outlook.com”. Once you get a token for the correct user you can retest.

Cheers.

KevinTheJedi

nadeem9810

Also, your Scopes are incorrect. You must use these:

https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Deprecations%202024/Licensed%20Personal%20Emails.html

Cheers.

nadeem9810

KevinTheJedi

Okay, I have shared another email account, and after Microsoft authentication, I received the token. However, I’m still unable to fetch emails or create related tickets.

KevinTheJedi

nadeem9810

You can see the token is clearly expired; you need to retrieve a new one.

Cheers.

KevinTheJedi

nadeem9810

Also, that is one is missing offline_access scope…you really need to start double checking all your setting as per the documentation.

Cheers.

nadeem9810

KevinTheJedi

Ok its not auto reset, now I have re-submit but still not fetch emails.

KevinTheJedi

nadeem9810

Read my comment above.

Cheers.

nadeem9810

KevinTheJedi

I have send Outlook Scopes as below:
offline_access https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send

API permission on Microsoft as below:

and get token details as above mention

KevinTheJedi

nadeem9810

If that's for both the email in osTicket and the App Registration in Entra then that's good. Once you get the Token with the valid scopes and right user you make sure the Remote Mailbox tab has hostname, port, etc. configured and that the Status is set to Enabled. Then you Save Changes and ensure it save successfully. Then you make sure global fetching is enabled (Admin Panel > Emails > Settings > Email Fetching > Enable). Lastly, you make sure a valid cron job/scheduled task is running and you should be good to go.

Cheers.

nadeem9810

Thanks, KevinTheJedi for your support. My issue was resolved after granting the same API permissions from the Microsoft admin panel.