Return
-
Title
AADSTS90010: The grant type is not supported -
Description
While attempting to configure the Azure BackSync via the Configure Azure BackSync wizard in the Synchronization Service, the following error is observed:
One or more errors occurred.AADSTS90010: The grant type is not supported over the /common or /consumers endpoints. Please use the /organizations or tenant-specific endpoint you used common. -
Cause
The Exchange Online Management module v2.0.4 and later enforces Modern Authentication, causing O365 connector connections to fail if Modern Authentication is not enabled for the Azure tenant.
This issue is being tracked as Product Defect 271447.
-
Resolution
WORKAROUND 1
In the Office365Connector_ConnectorConfig.xml configuration file, disable Modern Authentication and add /organizations.
- Navigate to C:\Program Files\One Identity\Active Roles\7.4\SyncService
- Locate the file Office365Connector_ConnectorConfig.xml
- Make a copy of the file for backup purposes
- Open Office365Connector_ConnectorConfig.xml in a text editor
- Find the Tenants tag
- Insert the following information as pictured below, substituting valid Tenant information:
- Save the file and restart the Synchronization Service
WORKAROUND 2
Roll back the Exchange Online Management module to v2.0.3
- Stop the Synchronization Service
- Run the following cmdlet to uninstall the Exchange Online Management module:
- Uninstall-Module ExchangeOnlineManagement
- Run the following cmdlet to install the Exchange Online Management module v2.0.3:
- Install-Module -Name ExchangeOnlineManagement -RequiredVersion 2.0.3
- Start the Synchronization Service
STATUS
Waiting for fix in a future release of Active Roles.
-
Change Request
271447 -
Additional Information
Reference Active Roles Release Notes, Known Issue 271447 for more information.
