OAuth2 and Authentication

OAuth2 returns 'No input file specified' error when authorizing a Microsoft 365 mailbox on Apache with mod_fcgid

Ensure Apache mod_rewrite is installed and enabled, and that AllowOverride All is set in the Directory block for the osTicket root. Add [R,L] to the RewriteRule in api/.htaccess and reload…

MS OAuth2 error: 'The API version V2 has been deprecated' when authenticating Microsoft 365 mailbox

Microsoft deprecated the Outlook REST API v2.0 (https://outlook.office.com/api/v2.0/me) used by osTicket for email address verification during OAuth setup. Workaround: create a JSON file on your server containing {"EmailAddress": "your-mailbox@domain.com"} and…

OAuth2 authorization loops back to the homepage instead of completing setup when using Apache with mod_fcgid.

Check that the Redirect URI configured in your Azure/Google app registration exactly matches the osTicket redirect URL (https://yoursite.com/api/auth/oauth2). If migrating from another server, the base URL in ost_config must be…

How do I properly migrate an osTicket database from one server to another?

Use native mysqldump or mariadb-dump from the command line -- this handles binary data (attachments stored as blobs) correctly. MySQL Workbench exports may corrupt binary data unless the binary export…

OAuth2 Entra ID login redirects back to home page without logging in after the first successful login. Re-creating the user in osTicket fixes it temporarily.

This is likely a duplicate or stale user record in the database, or a Guest User session issue. Do not delete and recreate the user -- instead clear all browser…

Microsoft Entra ID (Azure AD) OAuth2 only works on the very first login. Subsequent logins authenticate successfully on the Entra side but redirect to the client home page without logging the user in.

This appears to be a Guest User session issue. Clearing all browser cookies/cache/sessions may temporarily resolve it. The session patch referenced at https://forum.osticket.com/d/107272-authentication-required-error/2 may or may not help depending on…

OAuth2 plugin activation returns HTTP 500 immediately on first enable, before any email is configured.

PHP 8.5 is not yet a supported version. Downgrade to PHP 8.2-8.4 (8.4 recommended), restart the web server and PHP-FPM, and retry activation. If the 500 still occurs on a…

End-user ticket view links in email notifications return 404 or ask for username/password instead of showing the ticket thread anonymously.

Ensure the following setting is enabled: Admin Panel > Settings > Tickets > 'Enable HTML Ticket Emails' / 'Enable Auth Token' (the setting that allows unauthenticated access via a token…

How do I set up Gmail with the latest version of osTicket?

Use standard Gmail IMAP/SMTP connection settings (imap.gmail.com:993, smtp.gmail.com:587). Gmail requires Modern Authentication (OAuth2). Install and enable the latest build of the OAuth2 plugin, then configure it using the Google Authorization…

OAuth2 with Azure/Microsoft 365 loops back to the home screen after authenticating. No error shown.

Delete the plugin instance and create a new one. Only configure client ID, client secret, and the two endpoints (Authorization and Token) -- do not modify the default Scopes. After…