KB Article #192820
Authorize and Token URLs for MS Outlook connector must include Azure tenant Id
Problem
You are experiencing intermittent errors with the MS Outlook connector. One example is this error:
AADSTS7000215:
Invalid client secret provided. Ensure the secret being sent in the
request is the client secret value, not the client secret ID, for a
secret added to app '….
'
Resolution
Authorize and Token URLs
When configuring the MS Outlook connector, the Authorize URL and Token URL have these default values:
https:// login.microsoftonline.com/common/oauth2/v2.0/authorize
https:// login.microsoftonline.com/common/oauth2/v2.0/token
However, 'common' must be replaced with your own Tenant Id from Azure:
https:// login.microsoftonline.com/<your-tenant-id>/oauth2/v2.0/authorize
https:// login.microsoftonline.com/<your-tenant-id>/oauth2/v2.0/token
The tenant ID is shown in the Application screen in Azure:
Client secret expiration
OAuth client-secrets in Azure expire after some time, anywhere from 90 days to 24 months. When the secret expires, a new one must be created and provided in the Fusion configuration.