Error: SOAP client returned status of 401

If you run the 'Test Settings' feature for your email account, and it shows an error saying Error: SOAP client returned status of 401, this usually means that you are attempting to login with Basic Authentication, and you need to configure OAuth using the guides available here.

invalid_client

If you are able to login to your Office365 account successfully, but once complete you see an invalid_client error, this usually means an invalid secret and may be the result of 2 potential issues.

1. If you've just created the application, Microsoft may not have provisioned your secret yet. Wait a few minutes and try again.

2. If it still fails to work after a few minutes, you may have copied the wrong secret (i.e. copied the Secret ID instead of the Value, or have a secret for a different app). If that is the case, generate a new secret and try adding it to Deskpro again.

cURL error 60: SSL certificate problem: unable to get local issuer certificate

If you attempt to generate the Access Code, and the pop-up window displays the following error:

cURL error 60: SSL certificate problem: unable to get local issuer certificate
 copy

This is due to outdated root certificates on your server, causing the SSL connection to Office365 to fail. We have a guide which explains how to update your root certificates available here

Manually configuring permissions

Depending on your configuration, your Office365 tenant may require app permissions to be configured by an admin prior to allowing users to login via the application.

If your tenant requires pre-approved permissions, Deskpro's OAuth application will request the following permissions from the user:

• offline_access

• EWS.AccessAsUser.All

• IMAP.AccessAsUser.All

• POP.AccessAsUser.All

• SMTP.Send

These can all be pre-approved in the Office365 application under the API Permissions option, and all the permissions can be found under Microsoft Graph delegated permissions

We recommend clicking Grant Admin Consent after applying permissions to allow the accounts to login without prompting for approval.