O365 Email transferred to the cloud - Authentication issues

[frode.veiseth]

Hi. We have transferred the mail exchange to the cloud. I use the ‘ApplicationIdAndSecret’ as Authentication Type, and are providing the Application ID, Application Secret and Tenant. When using old script with the Dependencies = ‘Windows - Legacy’ I am able to send e-mail and create list of e-mails in ‘Inbox’.

But when I create new scripts where the Dependencies = ‘Windows’ I only receive errormessage: “The provided value for scope Mail.Read Mail.ReadWrite Mail.Send Mail.ReadWrite.Shared User.Read - is not valid. Client credential flows must have a scope value with /.default suffixed to the resource identified (application id url)”

Both types of scripts try to access a Shared mailbox.

Anyone that can help on what to do to fix this?

[sonaliaggarwal47 (Sonali Aggarwal)]

Hi @frode.veiseth

Yes, this happens with certain version of graph api package.

which version of O365 package you are using? This issue occurs with certain version of packages.

I would suggest using below version, it will work.

[frode.veiseth]

Hi. Thank you.
Yes, I use the 2.5.9 version

Frode

[sonaliaggarwal47 (Sonali Aggarwal)]

@frode.veiseth

Client credential flows must have a scope value with /.default suffixed to the resource identified (application id url)

@frode.veiseth

My bad, unaffected version is 2.3.3

Please refer below post

Microsoft.Graph - Application Permissions - Microsoft Office 365 Scope - General Exception

Hello community, I would like to send unattended emails with Azure App by using Microsoft Graph with application permissions type. The admin access is granted. [image] I have defined multiple URI [image] But still I get the below error. Do you have any clue why?? Microsoft.Graph.ServiceException: Code: generalException Message: An error occurred sending the request. —> Microsoft.Identity.Client.MsalServiceException: AADSTS1002012: The provided value for scope Mail.ReadWrite Mail.Send …

if still doesn’t resolve for you, refer below post

While using office 365 scope

@Krishna_Raj If no scopes are manually selected from the Scopes wizard, the Auto-detect function is applied by default at runtime, and the need for configuring the wizard is eliminated. All the minimum required scopes are selected at runtime. You can also add a scope manually after adding a child activity to Microsoft 365 Application Scope. they are saying we can add the scope but with which activity they have not mentioned

[prashant1603765 (Prashant Kumar)]

Hi @frode.veiseth

Try might be work- for authentication type applicationidandsecret, set scope to https://graph.microsoft.com/.default only. do not list scopes like mail.read or mail.send. this is required for client credentials flow. update the microsoft 365 scope activity accordingly.

Happy Automation

[frode.veiseth]

Hi
Thank you for your help.
When I use the version 2.3.3 of the ‘Microsoft 365’ package and put the ‘Save Attachment’ in a ‘Microsoft Office 365 Scope’ it works as before.

[sonaliaggarwal47 (Sonali Aggarwal)]

Hi @frode.veiseth

Happy to know it worked.

Kindly mark the post as solution so this topic can be closed and help others with similar issues.

Regards
Sonali