Office 365 user synchronization fails suddenly (The provided client secret keys are expired / Invalid client secret is provided)
Posted by Philip Schaffrath on 21 Aug 2020 16:00
During user synchronization appears the error message:
A "Service Principal" is required to synchronize users from the Office 365 Azure Active Directory with MailStore.
Please check with the "Get-MsolServicePrincipalCredential" PowerShell command if the password of the "Service Principal" has expired:
Use the name of the "Service Principal" that is configured in MailStore to check the password.
Replace the Value 'Pa$$w0rd' with your own password.
On September 20th, 2019 Microsoft announced the end of support for Basic Authentication for Exchange Online APIs in the future. This affects any MailStore Server version prior to 13, which will therefore no longer be able to authenticate users against Microsoft 365 when trying to log into MailStore Server.
In MailStore Server 13, support for modern authentication methods via OAuth 2.0 & OpenID Connect as per Microsoft's recommendation was introduced. Therefore, please refer to the chapter Synchronizing User Accounts with Microsoft 365 (Modern Authentication).
Article-ID: KB20171123-0-EN (Deutsche Version)