Hello KTHK,
This error indicates Outlook is failing modern authentication when adding the account, usually due to cached credentials or conditional access policies. The profile container itself is fine, but Outlook cannot validate the token, which triggers the “credential is invalid, sub status 6008” message.
The first step is to clear any cached credentials. Open Windows Credential Manager (control.exe keymgr.dll) and remove all stored entries related to Office365, Outlook, or your mail domain. Then restart Outlook and try adding the account again. If the issue persists, run dsregcmd /status in Command Prompt to confirm the device is properly joined to Azure AD or Hybrid AD; misalignment here often causes token failures. Also check that the machine has correct time synchronization, since clock drift can invalidate authentication tokens.
If you are using MFA or Conditional Access, verify that the policies allow Outlook desktop clients. Sometimes new Outlook builds enforce modern auth differently than older ones, and policies need adjustment. Updating Office to the latest build is also recommended, as Microsoft has patched several credential handling bugs in recent releases. If the account works fine in Outlook Web Access but fails in desktop, repairing Office via Control Panel > Programs > Office > Change > Quick Repair can reset the authentication components.
If none of these steps resolve the issue, collect logs using the Microsoft Support and Recovery Assistant (SaRA) tool, which can diagnose Outlook sign-in problems and provide a remediation path. This ensures you have detailed diagnostic data if escalation to Microsoft Support is required.
I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!
Harry.