Keysafe connection asking mailbox for admin approval

[Stuart Torres-Catmur]

We have a mystery.  One of our integrated mailboxes stopped connecting a month or so ago (not sure why yet).  We can now access the mailbox via Outlook ok, but for some unknown reason, Hornbill keysafe is asking for some kind of admin permission after entering the login details.  Our internal infrastructure team has looked at all sorts of potential policy/license/permission options, but so far to no avail.  The only thing that we can see that makes this mailbox distinct from the others is the domain, but no policy we can see is excluding that.

Login name is as shown below using our usual WalthamForest domain, but the actual email address itself is Procurement@psprocure.co.uk (that is not the login name, before you ask)

We are at a loss as to what 'admin approval' Hornbill is asking for.  Anyone have any ideas?

[Victor]

@Stuart Torres-Catmur

Does this help?

https://wiki.hornbill.com/index.php?title=How_to_configure_OAuth2_Authentication_for_Microsoft_Office_365_Mailbox_integration

and then

https://wiki.hornbill.com/index.php?title=How_would_the_Office365_administrator_approve_permission_requests

[Stuart Torres-Catmur]

@Victor Thank you! we will check these out and come back to you.

[Stuart Torres-Catmur]

@Victor finally we have cracked it, but still not too clear what did it.  The mailbox had previously been set as inactive, which we suspect broke the trust authentication in OAuth2.  We used Powershell to add Consent to give Hornbill Access to the account as this couldn't be done via the Keysafe connection process.