Zabbix - Media Type - M365 OAuth

[TeeJay13]

Has anyone been able to successfully get M365 OAuth working in Zabbix?

We're running into an issue when trying to configure the OAuth token for M365. When the second window pops up, we get this error:

field: code is mandatory

All fields appear to be filled out correctly, so we're not sure what's missing or causing this error when configuring the OAuth tokens.

We're on Zabbix 7.4.0 (Frontend/Backend).

Any help or insight would be appreciated!

[TeeJay13]

Forgot to add this was the documentation we followed on Zabbix side: https://www.zabbix.com/documentation...ffice?hl=OAuth

[rp93]

Morning, I noted this as well, but i am not sure what i am missing - did you ever find out or solve?

[singk]

I have an issue getting the Zabbix OAUTH to work with Office365 as well. I am running Zabbix 7.4.x. Has anyone got it working?

[freddyd]

I have the same issue. I don't know how to get Office365 email with OAUTH working..
We are on Zabbix 7.4.2.

[splru69]

Hi,

Same issue on my side 7.4.2 for the version, we tried to make OAuth work but was error on error like :

AADSTS900144: The request body must contain the following parameter: 'client_id'

. or the scope etc.... and we had the good information each time
Got into the microsoft window but with the error message above.
If anyone make it work, i'll be glad to hear from you

[olegus]

Same issue....

[arjanv]

i'm also struggling to get this working. What should i put in the "Redirection endpoint" field?

[rp93]

I've been struggling for a while - if anyone has useful ideas please let me know! Same issues

[rp93]

I managed to get some traction on this - primarily on 7.4.5. Key things i found 1) make sure you are authenticating the OAuth from the Zabbix console from the local device and not a remote http/s connection (i.e. if your authorisation URLs are http(s)://localhost/zabbix in M365 then doing this from a session on another device will fail) - so you may need to use a desktop gui rather than a server OS (not ideal but hey). 2) The M365 ent application needed to be set to all tenants not just the one i was using. I'm not a fan of this and will look to see if we can restrict down again.

[rp93]

Also, ensure you are using the Office 365 option for email provider.

[MarcP]

I managed to get some traction on this - primarily on 7.4.5. Key things i found 1) make sure you are authenticating the OAuth from the Zabbix console from the local device and not a remote http/s connection (i.e. if your authorisation URLs are http(s)://localhost/zabbix in M365 then doing this from a session on another device will fail) - so you may need to use a desktop gui rather than a server OS (not ideal but hey). 2) The M365 ent application needed to be set to all tenants not just the one i was using. I'm not a fan of this and will look to see if we can restrict down again.

Thanks, this helped me to get it working.
regarding 1), if you use a zabbix.example.com domain instead of localhost as authorisation URL, then it doesn't matter from which device you do the session.
regarding 2), that did actually do the trick