Incoming Mail ARS job failing with error: Unable to refresh access token

[AS5278]

Hi,

We have setup OAuth for IncomingMailARS Job and we have an OAuth app setup in Azure AD. We also got the necessary Graph API permissions enabled in the application.

Whenever we are making any change to the SMTP configuration and Save it, the IncomingMail Job runs fine after that for about an hour. After 1 hour the job starts failing with error: "

Unable to refresh access token".  Again, if we make changes to SMTP configuration and save it, it works for an hour and then starts failing. 

I think 1 hour is the access token expiration time. When we make changes to config, the access token is refreshed and the job works. But once the access token expires Saviynt is not able to automatically refresh it.

My question is that : Can it be because the same OAuth app in Azure AD is being used for IncomingMailARSJob in both Saviynt Test and Saviynt Production?. Should we setup two different apps for these two environments?. 

Please guide. We are facing this issue since months now. I am attaching the logs for when the Job Works and also for When the Job doesn't work.

[Manu269]

Can you refer this thread : https://forums.saviynt.com/t5/identity-governance/oauth-email-invalid-user-error/m-p/23176#M11776

https://forums.saviynt.com/t5/identity-governance/issues-while-configuring-actionable-emails/m-p/237...

[AS5278]

Hi Manu,

We have tried the above two things. All Graph API permissions are enabled in the app. Also, the issue is that this thing works for an hour after making changes to the SMTP config. The emails are getting processed as I have confirmed. But, after one hour we start facing Expired access token error and Saviynt is not able to automatically refresh the access token.

Is there any detailed guide stating how to setup the OAuth app in Azure AD?. As I strongly feel that it has something to do with Oauth app or the mailbox folder level permissions itself. But, I can't go back to the client asking for enabling API and permissions and making changes just based on assumptions. They are looking for a guide/instruction manual from Saviynt.

Thanks.