AADSTS7000215: Invalid client secret provided

Question

I got this error setting up ODOO Outlook Connector: An error occurred when fetching the access token. AADSTS7000215: Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID, for a secret added to app '08520c3e-80a1-48cd-b87a-bf425fd54973'. Trace ID: f38c62c0-6359-422e-8a0e-16bcf7bb8e00 Correlation ID: 96c639cb-eecf-4178-b6ab-67fc74d56749 Timestamp: 2024-06-28 23:26:05Z

Secure ID is correct - I tried to regenerate man y times. There is no + or = signs. Still not working - please help ?

Answer 1

Hello STRATTFORT

The "invalid client secret" error typically occurs if the secret is invalid, expired, or has a special character in it.

There are couple of solutions:

Client Secret Format:

• Ensure that you’re passing the client_secret correctly. It should be used in a web app or web API, not in a native app. Native apps may have difficulty reliably storing client secrets on devices1.
• Make sure you’re using the actual client secret value, not the client secret ID.

Check Encoding:

• Avoid encoding the secret; provide it as-is. Encoding might cause issues, especially if there are special characters involved.

Plus Sign Issue:

• If your client secret contains a “+” (plus sign), regenerate it until you get a secret without the plus sign. Some systems might interpret the plus sign differently2.
• Try to encode your secret ( e.g. replace + by %2B , = by %3D etc)