Trying to test out the outlook integration extension... not working so far.

[lazovic]

Hi radek,

It is always recommended to upgrade the official EspoCRM extensions versions on time in order to receive bug fixes, error corrections and enjoy new functions.

In this case, the latest version of Outlook Integration extension, almost the same values for the scope and scopeMail parameters are set as in your archive (the only difference is that your archive has https://outlook.office365.com/User.Read+offline_access value for the scopeMail parameter, but it should not affect the functionality of the integration in any way). That is, for Outlook Integration extension to work correctly, you should simply upgrade its version itself.

Also, it is not recommended to use third-party extensions (even if at first glance they do not apply a serious effect), which in any way affect the official EspoCRM extensions.

[radek]

Hello,

I have had the same issue since about june 2023, it seems to me that Microsoft changed their scopes on graph/legacy APIs.

I made myself a module that fixes these scopes and had no issues since then. When I am deploying new Outlook integration for client I first try to test it without my fix, but always run in the same issues with MS permissions.

Feel free to install my module, it's just 2 metadata files that change scope.

Hope this helps.

PS: I know this fixes emails & calendars, I haven't tried contact sync, might not work.

[yoshee08]

For anyone running into a similar issue...


My fix was to follow this post on microsoft forms:

https://techcommunity.microsoft.com/t5/microsoft-graph-security-api/403-forbidden-response-when-requesting-microsoft-security-graph/m-p/333458

by Edward Koval

Try typing

https://login.microsoftonline.com/common/adminconsent?client_id={YOUR-APP-ID}

into your browser window to prompt the admin consent for your application again. For more details refer to Permissions and consent in the Azure Active Directory v2.0 endpoint.

[rabii]

What it says on the tin. After IMAP has been disabled in o365, my company is kind of scrambling to get something back up and working to capture emails. The solution SEEMS to be the outlook integration, but I cant get it to work.

We don't want to just buy the integration if it's not going to work so I requested a demo and am trying to get it set up in the dev environment provided my espo. I have followed the instructions (here) Created the app registration and key in azure, updated the integration in espo(dev), and created a new personal email... this is what I get:

Error 500
Outlook Oauth: Error after requesting GET [URL]https://outlook.office365.com/api/v2.0/me/[/URL]; Reason: Access is denied. Check credentials and try again.. Code: 403.

Has anyone gotten this working? or is this error just because I'm in the dev/demo environment?

I should note, when I created the personal email account in espo and saved, it DID give me the outlook box with the connect option. clicking through that enduced the expected popup with login.microsoftonline.com and I was able to successfully log in. THAT'S when I got the error.

you need to set up this step before connecting through the personal email account https://docs.espocrm.com/extensions/...g-up-for-users
that is how i got it to work.

[rabii]

even if you try to configure a group email account remember that you still need to allow such connection from the user profile. once you set the group account you need to have that group set up on your outlook as well and then you can go to your profile under External accounts you can allow for connection to be established and activate that account. https://docs.espocrm.com/extensions/...g-up-for-users

[victor]

@JayBee4pl,

Please create your own topic with an actual problem at the moment. In it, describe in detail what is working, what is not, and what is working, but not as you would like. Of course, also specify the version of EspoCRM and Outlook Integration extension, add screenshots and logs of your errors.
In general, describe your problems in as much detail as possible and I'm sure the community (and myself) can help you.

[JayBee4pl]

Now sending mails from group account does not work. Error 500. It says auth error in log. But password is working.
Urgent and annoying. We cannot work with Espo, everything is running via Outlook and its complete Chaos.

[JayBee4pl]

Same here. Needed to connect my personal account to outlook.
After this i can connect the group mail account.

[Emilvb]

The "solution" for me was to switch the Tenant from Organizations, to common, did a sync again (what failed), switched back to Organizations and it passed.

Probably i was to quick after the setup in Azure, but it worked for me.


Thanks for your support.

[rabii]

What it says on the tin. After IMAP has been disabled in o365, my company is kind of scrambling to get something back up and working to capture emails. The solution SEEMS to be the outlook integration, but I cant get it to work.

We don't want to just buy the integration if it's not going to work so I requested a demo and am trying to get it set up in the dev environment provided my espo. I have followed the instructions (here) Created the app registration and key in azure, updated the integration in espo(dev), and created a new personal email... this is what I get:

Error 500
Outlook Oauth: Error after requesting GET [URL]https://outlook.office365.com/api/v2.0/me/[/URL]; Reason: Access is denied. Check credentials and try again.. Code: 403.

Has anyone gotten this working? or is this error just because I'm in the dev/demo environment?

I should note, when I created the personal email account in espo and saved, it DID give me the outlook box with the connect option. clicking through that enduced the expected popup with login.microsoftonline.com and I was able to successfully log in. THAT'S when I got the error.

i had the same issue for other admin role users in the CRM however this was sorted as i had to first go to each user's External Accounts -> Outlook then i have to configured their sync with outlook calendar and contact and connect it and after that i went to their email inbox and connect and it works. you should consider doing this by order first to each's user's profile then access their External Accounts -> Outlook and just enable it, configure it and connect and after that go to their email address and connect it.

hope this helps.

[item]

Hi,
1) have you in o365 "Security Default" enabled ? if yes, i have not found solution then i disable it, and enable in Azure "Per User 2FA". (all our user have 2FA enable)
2) create as espoCRM documentation how configure Outlook extention.
3) i use only my tenant as setting and put value of 24 month for validity
4) don't forget to grand access to all api.
5) wait somes minutes and then connect your espocrm to o365

in espocrm admin, site url must begin : https://
our espocrm is unreachable over internet

i have do this this week because a working outlook don't work since wendsday

I think, microsoft have changed somethink, so you need create a new app registration if old don't work.

[rabii]

i am now facing same issue but i guess my situation is that i am trying to set up an email inbox for another admin user in the system. this didn't work and produced an error access denied code 403. not sure why this not working having already used the extension for my own user session and was successfully able to to set it up. still talking to the support team to see how to resolve this.

if anyone here sorted it out please share how you did it.

thanks

[rudepeople]

@rabii: I believe I know what you're talking about, I have the account set for SSL. I'm getting the error when I try connecting outlook.

[rabii]

I am talking about the IMAP and SMTP set up on espocrm. i had same issue like you but mine was sorted by using SSL connection on both.

[rudepeople]

means you are just missing some configuration

I am aware of that... but what? In azureAD? in espo?

but for IMAP it is working make sure to use SSL not TLS and it should work.

Are you referring to IMAP with o365? or IMAP with another MTA? because I own another MTA and I had to turn off starttls to get espo to work with it. Email providers are slowly abandoning the old authentication stacks in favor of starttls or oauth. espo needs to implement these authentication methods soon or people might be forced to migrate. Not every customer can afford a private MTA like I can. Most that can afford a second MTA, wouldn't bother. For them it's a cost/benefit calculation. Which is easier to migrate away from? Microsoft? or EspoCRM?