Smarter Track POP issue with M365 Account

Problem reported by Babar Zaman - 8/12/2024 at 5:07 AM

Not A Problem

Smarter Track is unable to pop emails in the ticketing system. The Office365 account we have been using for years however we have noticed this issue today.

SmarterTrack Enterprise Build 100.0.8367.13833 (Nov 28, 2022)

Errors in Portal > self-diagnostic: SmarterTrack Check-Up

Failed: Web test (SmarterTools Activation HTTP)
Notes: System.Net.WebException: The remote server returned an error: (308) Permanent Redirect. at System.Net.HttpWebRequest.GetResponse() at SmarterTrack.MRS.Settings.Controls.DiagnosticControl.TestWebPageLoad(StringBuilder sb, String siteUrl, String siteName)

Failed: Activation ECHO A0
Notes: Communicated, but got bad result: "Echo Test"

Failed: Activation ECHO A1
Notes: Communicated, but got bad result: "Echo Test"

To verify connectivity with 365, In Email > POP > we select OAUTH 2 >> it direct to M365 there it give successful connectivity, however at the same time Smarter Track shows error "There was an error attempting OAuth Access token"

16 Replies

Reply to Thread

Babar Zaman Replied

8/12/2024 at 5:28 AM

at SmarterTrack.HelperClasses.Security.OAuth2.<InitialAuthenticate>d__5.MoveNext()
    StatusCode: 401 

    ResponseBody: {"error":"invalid_client","error_description":"AADSTS7000222: The provided client secret keys for app '52b21753-****-****-****-d88f0ed06f73' are expired.

I believe in ST you guys are using secret key which has expired.

Kyle Kerst Replied

8/12/2024 at 7:08 AM

Employee Post

Hello Babar, I'm sorry to hear you're having trouble with this. I believe the OAuth components were updated in a later build and I recommend moving to the latest public release to see if these issues are resolved there. If the upgrade doesn't help though please submit a support ticket and we'd be happy to take a look for you!

Kyle Kerst Lead Internal Network/System Administrator SmarterTools Inc. smartertools.com

Fabio Colangelo Replied

8/12/2024 at 12:54 PM

Hello Kyle, I am having the same issue. It seems client secret for you app in Azure are expired and it will affect many users. My build is 8572.

Kyle Kerst Replied

8/12/2024 at 1:40 PM

Employee Post

Hi Fabio, thanks for your follow up on this. The client secret has already been updated and you can find that in our latest public release build. That should get you going in the right direction :-)

Kyle Kerst Lead Internal Network/System Administrator SmarterTools Inc. smartertools.com

Host Automate Replied

8/12/2024 at 2:33 PM

Well we should be allowed to use our own azure app secret key. Instead of dependency for build update.

Host Automate Replied

8/12/2024 at 2:33 PM

Well we should be allowed to use our own azure app secret key. Instead of dependency for build update.

Fabio Colangelo Replied

8/12/2024 at 2:47 PM

Kyle, does this mean that those who do not have the latest version and active support for SmarterTrack will no longer be able to use oAuth for MS365? This does not seem correct to me, since those who purchased the software and do not want to renew will no longer be able to use this function. We should be allowed to use our own azure app secret key, instead of dependency for build update and consequent renewal of support $$$.

Zach Sylvester Replied

8/12/2024 at 3:31 PM

Employee Post

Hello,

Thank you for reaching out again. The client secret required for Office365 integration involves a specific approval process with Microsoft, which is why we manage and update it in our latest builds. This ensures that the OAuth process continues to work smoothly for all users. Unfortunately, using a custom client secret for this purpose is impossible due to these restrictions. We are, however, looking into better methods that do not require upgrading for future builds.

Please feel free to reach out if you need any further assistance.

Kind regards,

Zach Sylvester Software Developer SmarterTools Inc. www.smartertools.com

Host Automate Replied

8/12/2024 at 3:43 PM

We don’t want to buy upgrade however we want to connect our MS365 mailbox in ST please provide us a patch without any cost. Thx

Tim Uzzanti Replied

8/12/2024 at 5:22 PM

Employee Post

If you truly believe you should't need to pay for updates for all the work we do to continually keep our product working with all the changes occurring on the Internet, you should probably find another provider. It's not just an API key, Microsoft and Google are sunsetting a ton of stuff and were constantly trying to accommodate.

Tim Uzzanti CEO SmarterTools Inc. www.smartertools.com

Host Automate Replied

8/12/2024 at 11:29 PM

Dear Tim, I understand your concerns but this is mot fair with customers to generate secret key in azure with 1 or 2 year expiry. You have an option there to generate key for 5 years.

If I am allow to ask can you please tell us all what expiry date of secret key in your new installer?

Babar Zaman Replied

8/13/2024 at 1:05 AM

This is a valid concern, please consider generating a secret key for maximum duration to facilitate customers who own a perpectual license key.

Tim Uzzanti Replied

8/13/2024 at 1:23 AM

Employee Post

It's like you didn't even read my post. Let me try again... It's not just the API key. Since 2022 (which I believe one of you is running a build from then), things have changed. Microsoft has changed their API's and how things work and we have had to accommodate when those happen, it is a never ending process. In addition, we add new features and we do security updates etc. This is why companies who develop software now offer what we call maintenance and support. What you bought SmarterMail you got a year of maintaince and support and we provided you continual updates. After that year, you must pay for maintenance and support if you would like more updates.

Tim Uzzanti CEO SmarterTools Inc. www.smartertools.com

Host Automate Replied

8/13/2024 at 1:51 AM

Dear Tim,

I wanted to inquire about the expiration date of the secret key. It seems that with the ST perpetual key, from your side there is an enforcement that blocks customers from continuing to use SmarterTrack with their MS365 accounts.

I am sure it would be in your knowledge that there’s an option in the Azure portal to generate the secret key with a custom period. You could have generated key for longer durations.

If there were any issues other than the expiration of the APP secret key, they would be understandable. Because the current build we are running almost an year old which was working fine days ago and suddenly stop working due to ST app key expiration.
However, in this case, I would like to make a humble request: if you plan to generate a new secret key, could you please use the custom period option in Azure to extend its validity for a longer period?

Babar Zaman Replied

8/13/2024 at 3:28 AM

I can confirm that with the latest ST installer, there is no error.

Andrew Barker Replied

8/13/2024 at 7:26 AM

Employee Post

As per Microsoft's documentation, while you can specify the expiration for a client secret, they limit the lifetime for the secret to 24 months. Microsoft used to offer the ability to get secrets that had a lifetime of up to 99 years, but that changed in April 2021. As we adapted to shifts in Microsoft's security requirements and APIs, we needed to create new client secrets with the necessary permissions.

Below are a couple references to the information available from Microsoft.

Microsoft blog post from February 2022 detailing the change to restrict client secrets to 24 months: https://devblogs.microsoft.com/microsoft365dev/client-secret-expiration-now-limited-to-a-maximum-of-two-years/
Instructions on registering an app with Microsoft. The relevant information is on the "Add a client secret" tab near the bottom of the page: https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app?tabs=client-secret

Andrew Barker Lead Software Developer SmarterTools Inc. www.smartertools.com

Back to Community Threads

Please leave this box unchecked

Reply to Thread

Enter the verification text