Issue

Either your redirect url is not set correctly, or you are missing delegated permissions. Note that you may need to provide admin consent to enable delegated permissions for all principals.

Resolution

Find your Glean application in the Azure portal. The error message should provide the application ID (client ID) used for live mode.

  • Navigate to Authentication > Platform configurations. Check that you have a web redirect URL for the app you just created. It will be of the form https://<customer-deployment-name>-be.glean.com/instance/o365/oauth/verify_code.
  • Navigate to API Permissions > Delegated Permissions. Check that you have the following delegated permissions:
    • offline_access
    • User.Read
    • Files.ReadWrite.All

For additional assistance, please contact Glean Support at https://support.glean.com