Overview
It may happen that you cannot log into Workspace anymore due to one of the oAuth2 error messages described below. In this article, we explain how to fix this issue.
Error messages & Solutions
"Sorry, we weren't able to retrieve an OAuth token from the authority server"
Explanation: this error message is due to an expired client secret or the oAuth2 token has been expired or deleted.
Solution: you will need to create a new client secret and set up SSO for your Workspace environment. To fix this issue, follow the steps below:
Go to your Workspace SSO App Registration in Microsoft Entra ID (previously called Azure AD).
Navigate to Certificates & Secrets.
Create a new Client Secret.
Tip: You can set the expiration date on 99 years.
After creation, make sure to copy the key (value)! You can use this key in the next step.
Request Emergency Access for the admin account and follow the steps provided to update the key in the SSO setup for your Workspace.
Redirected to a "strange domain"
Explanation: we automatically fetch the first domain available in the tenant. It could happen that this is an old or strange domain to you, not used as default domain for the tenant or e.g. accidentally deleted the secret key for the SSO application in Microsoft Entra ID (previously called Azure AD).
Solution:
Do issues still persists? Request emergency access for the admin account and follow the steps to update the Workspace SSO App Registration in Microsoft Entra ID, or if needed, recreate it.