Outlook with OAuth - PaperCut

[Bankesy]

Hello, me again

 

Has anybody got PaperCut working via Outlook with OAuth? I've followed the guides and double-checked I've done everything correctly but I can't send test notifications, "Failed to send test notification, check your settings and try again. Reason: Connection timed out: connect."

 

Any suggestions? Sophos? Is something missing on the 365 side?

[UOB]

Have you turned on the relevant authentication in Office 365? For the account sending the mail and for the tenant?

 

We haven't done oAuth2 yet, but are using an internal relay to Office365 and its flakey at best, works on some but not others, so we'll try the OAuth2 approach soon.

 

Most of our issues are devices that have the SMARTSDK for papercut.

Edited April 12, 2024 by UOB

[VBallantyne]

Just looking at setting this up myself now, and the settings wont apply. I've done the app reg in Entra following this guide:

 

Configure an SMTP server over OAuth2 for Office 365 or Microsoft 365 | PaperCut

 

but the Client Secret box keep clearing itselt and I get the status on papercut saying Status: Not configured?! Tried inprivate mode and it asks for a Microsoft 365 sign in for authorsation and tried bother my admin accocunt and the SMTP account.

[VBallantyne]

ok my mistake was I was using the Secret ID instead of the Secret Value

 

also to confirm the account to use when asking to authorise is the SMTP email and not a domain admin.

[Bankesy]

@VBallantyne @UOB

 

I don't know about the 365 authentication for the account and tenant, I was just following the guide so if there's anything outside of the guide that needs configuring I don't know how we would know what to do.

 

Can somebody explain to me in simple terms what I would be looking for in terms of this please?

 

Thanks

[jonnykewell1]

Just looking at setting this up myself now, and the settings wont apply. I've done the app reg in Entra following this guide:

 

Configure an SMTP server over OAuth2 for Office 365 or Microsoft 365 | PaperCut

 

but the Client Secret box keep clearing itselt and I get the status on papercut saying Status: Not configured?! Tried inprivate mode and it asks for a Microsoft 365 sign in for authorsation and tried bother my admin accocunt and the SMTP account.

 

Have you had any luck with this? I've got the app created following the guide but it doesn't seem to like the 'localhost' URI addresses and says they don't match with the app, coming up with error AADSTS50011. When I try and copy the URI from the error screen into 365, it says that the URI must start with https or be local host but the error specifically references the server name which, i'm guessing it why it's failing (despite what it says to use in the guide). Once authorised i'm fairly sure that's my setup done!

Edited June 11, 2024 by jonnykewell1

[VBallantyne]

Morning, Yes I did manage to get this resolved.

 

The final thing I did was you need to run the Papercut Authentication steps on the actual Papercut Server so the address Localhost is applicable. If you try and do it only your own client laptop/pc it wont work. Needs to be completed on the papercut server directly.

 

Also as a reminder from above, make sure the Client Secret value is correct and not the Secret ID and you use the SMTP user account and credentials and not a random Global Admin account.

[jonnykewell1]

All working, thanks for your help!

[anke09]

Sorry to necro the thread but just set this up and we came a cropper with app permissions as we don't allow all users to request/consent for apps (even though I'd granted permissions mentioned in the article above)

Managed to get it working by signing in with an account with permission to consent, changing Papercut back to on prem Exchange (our reasoning for moving is to moving towards decommissioning Exchange), changing back to OAuth settings with the correct user account.

Testing with a handful of staff and students and so far so good

[Olliedawg]

We've had this setup for a few months now. Flawless, no issues at all so far.

[anke09]

Has anyone had any experience of OAuth dropping out? Seems fine for a few hours then comes back with Status:Error

Edit:

Can't see anything in the GUI logs, if I change from OAuth back to custom, then back and re enter details and authorize it works again at least for a bit!

Edited November 12, 2024 by anke09

[Bankesy]

@anke09 the only dropout issue we had was when the token on the Azure side expired because I had given it a short date

[DannyMartin]

Hi, 

Can anyone help? 

I am getting this error when trying to authenticate.

 

The account is a user mailbox and I’m able to sign into it without any issues, so it doesn’t appear to be a problem with the account itself.

I have email apps all ticked on the mail box. 

 

I am doing this on the papercut server so the local host should work. 

 

Anyone got any ideas . 

 

Thanks.