salesagility / SuiteCRM

SuiteCRM - Open source CRM for the world
https://www.suitecrm.com
GNU Affero General Public License v3.0
4.4k stars 2.06k forks source link

Microsoft OAuth Provider Setup - Hardcoded Redirect URI Incompatible - v7.14.4 #10483

Open rmunoz10 opened 1 month ago

rmunoz10 commented 1 month ago

Issue

v7.14.4 ubuntu 22.04

Following: https://docs.suitecrm.com/admin/administration-panel/emails/microsoft-oauth-provider-howto/

When creating Microsoft OAuth Provide the UI shows a non-editable Redirect URI: http://my-site:443/index.php?entryPoint=setExternalOAuthToken.

This URI must be the same one as defined in Microsoft. However, Microsoft only allows 'https' and not 'http'.

If you try to define it in Microsoft as https://my-site/index.php?entryPoint=setExternalOAuthToken, then the Redirect URI's don't match when you try to authenticate during an Inbound Email with OAuth creation and authentication fails

Is there a way to edit the Redirect URI during Microsoft OAuth Provider Setup or in an underlying source file?

Thanks,

Possible Fix

No response

Steps to Reproduce the Issue

Follow this document:

https://docs.suitecrm.com/admin/administration-panel/emails/microsoft-oauth-provider-howto/

Context

Can't setup IMAP client connections

Version

7.14.4

What browser are you currently using?

Firefox

Browser Version

No response

Environment Information

PHP 8.3.9

Operating System and Version

Ubuntu 22.04

chris001 commented 1 month ago

Are you using a company Azure tenant (office365?) email address, or a free webmail (microsoft live/hotmail?) email address?

rmunoz10 commented 1 month ago

I am using a company Azure tenant (office365) email address

johnM2401 commented 1 month ago

Hey @rmunoz10 !

I believe the Redirect URI in the CRM builds off of your config.php -> site_url value So if you update the site_url to start with "https", then this is what your Redirect URI will use. (Assuming this is a viable step for your environment)

I do agree this should be less hard-set, so marking as a bug.

Thanks again!