@"KevinTheJedi"

Thanks for that, oddly enough I arrived at that documentation myself think there was a popup in the config. The main problem I think, it was the account, it had a stupid MFA strength setup was getting stuck asking for more information. Being a federated account I needed to add federated password + software token to the list to get a full authentication to work. Once I was able to get in to office.com with it the token side of things is issued and like you say I've got a token tab, which I hope renews as it appears to be a 24 hr window. It's working like a champ now as far as I can see.

Thanks again for the help.

Did you get this working flimby?

I have the same problem as you but with windows server 2022, php 8.1, mysql 8

I think I even get the token but no mail actually flows. Going to work on that this week all being well.

That's the one Kevin, the force is certainly strong with you.

I'll look in to that, I was just configuring the email side of things which also rely on that module and the dialog screen came up with this error.

cURL error 60: SSL certificate problem: unable to get local issuer certificate (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://login.microsoftonline.com/3f8f3<OMIITTED>eb06f/oauth2/v2.0/token

Looking up that error indicates an SSL cert problem so that url you've cited must be on the right path, thanks.

Tried a freshly imaged computer and even a Mac all exhibit the same symptoms, I’ve reinstalled the plugin, reconfigured it to a fresh app registration made sure all the uri’s are wordperfect, copied down the secret generated from the app and retested to no avail. Same thing every time, goes through the motions of modern auth and returns to osticket as an unsigned in user for both admin and user portals.

I’ve tried php 8.2 and gone back to 8.1.

I think my next step is to abandon oauth for now and try ldap integration.

Everything that was configured was cut and paste between the app and the documentation was pretty good as far as i could see.

Hi Kevin,

Yep Checked that all is well as far as I can see.

Here is the OSTicket Oauth plugin settings. vs the Azure App Reg. (Single Tenant)

Hi thanks for responding,

I’ve tested both methods so far, the administration portals’ azure sign in button returns me to the end user portal not signed in.

I have url redirection installed in IIS but no specific configuration set unless the installer for osticket did something as part of the install?

All prerequisites were green prior to install.

Following the documentation on the OsTicket site, I've installed OSTicket 1.8 on IIS (Server 2022) with PHP 8.1 and MySql 8

All the preq checks passed on the installation and the site works fine to all intensive purposes but having installing the OAuth plug which I selected during the download of OSTicket I cannot get the Azure authentication to work.

I followed the documentation to setup SSO with Azure (https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authentication%20(SSO)%20Guide.html), I've triple checked my setup and it's exactly setup as directed in the documentation, it works in so much as it arrives at a page post successful authentication to the AzureAd, but doesn't login to my OSTicket portal. This is the case for both the end user portal and the ticket management portal aspect.

Are there any diagnostic checks I can perform or other items that need configuring?