Outh Problem - Home Screen loop

enekoas

Hi, i have done a new osticket installation and enabled oauth2, i followed all procedures, but i get always a home screen loop.

it redirects me to azure login and after comming back, it gets on home screen. I have tried to login again and always the same happens. I have the allowoverride option correct, also the module ... i havent modified de .htaccess file ....

KevinTheJedi

enekoas

Could mean improper configuration with the app registration and/or plugin config. Can you share screenshot of your email auth config censoring any sensitive info first?

Cheers.

enekoas

KevinTheJedi

enekoas

Whoa, yea, I see why now. Why did you mess with the Scopes? Keep that default. Delete the plugin instance from osTicket, add a new one, and reconfigure. However this time only mess with the client id, client secret, and two endpoints. That’s all you should mess with.

Cheers.

enekoas

Same error with this

enekoas

i changed the auth endpoint and token enpoint because it havent worked

KevinTheJedi

enekoas

Then it sounds like the info it gets back from IdP doesn't match an existing agent so it kicks you back to the client portal.

Cheers.

KevinTheJedi

enekoas

Wait... I just realized the new screenshot you posted shows an email account plugin instance; not a user/agent auth plugin instance. What exactly are you attempting to setup? User/Agent auth or Email auth or both?

Cheers.

enekoas

KevinTheJedi User/Agent auth using their o365 account

enekoas

@KevinTheJedi any update ?

KevinTheJedi

enekoas

Upgrade to v1.18.3, install the latest build of the oauth2 plugin, restart webserver and PHP-FPM, clear all cache/cookies/sessions, and retest.

Cheers.

enekoas

Same problem here

KevinTheJedi

enekoas

Are you saying same problem after following my instructions above?

Upgrade to v1.18.3, install the latest build of the oauth2 plugin, restart webserver and PHP-FPM, clear all cache/cookies/sessions, and retest.

Or are you simply saying you have the same issue as OP?

Cheers.

enekoas

I mean, after upgrading both i have the same problem. btw .. oauth plugin shows same version number.

KevinTheJedi

enekoas

Yes, new plugin build, same number. We only change the version of plugins on major changes.

Have you checked all logs (general server logs, webserver error logs, PHP error logs, MySQL/MariaDB error logs, osTicket System Logs, Browser Console logs, etc.) for any related errors?

I'm wondering if the information your system gets back from the auth attempt from MS is not matching the User's Agent's information. If you sign in as a User does it work (just not with an Agent)? If so that indicates issues with matching account info (email/username) with the Agent's profile information. Make sure these match exactly what's in the IdP.

Cheers.