oAuth ews o365 - error 403 forbidden - suggestions welcome

john in t veld 21 Reputation points
2022-09-27T12:02:34.427+00:00

Code works correct with another o365 tennant but not this tennant.
Code flow is exactly as stated here https://learn.microsoft.com/nl-nl/exchange/client-developer/exchange-web-services/how-to-authenticate-an-ews-application-by-using-oauth

Debugging it I see the token verification works fine but my ews call to bind to a user inbox errors out with 403.
the email address is correct, mailbox has a license in o365, ews policy is enabled for all mailboxes.
i guess it must be a setting in o365 but what?

Exchange Server Development
Exchange Server Development
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Development: The process of researching, productizing, and refining new or existing technologies.
505 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,331 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 94,521 Reputation points MVP
    2022-09-27T12:28:48.17+00:00

    403 can be a result of an Application access policy blocking access to certain mailboxes. Read here for more details: https://practical365.com/new-application-access-policies-extend-support-for-more-scenarios/

    0 comments
  2. Amit Singh 4,846 Reputation points
    2022-09-29T02:44:56.643+00:00

    It sounds like they have either disabled EWS on the Mailbox that you're trying to access, or they have limited the clients that are allowed to connect e.g., https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/how-to-control-access-to-ews-in-exchange . You can try testing EWS itself using a user account via the EWSeditor https://github.com/dseph/EwsEditor

    0 comments
  3. john in t veld 21 Reputation points
    2022-09-29T13:44:48.307+00:00

    it was simply an issue with the application ID being incorrect in AAD !
    thanks for your help guys.

    0 comments
  4. Jame Xu-MSFT 4,166 Reputation points
    2022-09-30T09:33:46.647+00:00

    Hi @john in t veld ,
    Glad to know that your issue is resolved now! Since our forum has the policy that The question author cannot accept their own answer, I would make a brief summary of this post so that other forum members could easily find useful information here:

    Issue Symptom:
    oAuth ews o365 - error 403 forbidden
    the application ID being incorrect in AAD

    Solution:
    Change to the correct application ID

    You could "Accept Answer" for this summary to close this thread, and your action would be helpful to other users who encounter the same issue and read this thread. Thanks for your understanding!

    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments