How to troubleshoot Microsoft 365 OneDrive or SharePoint authorization errors

  1. Introduction
  2. Check Conditional Access Policies
  3. Disabling Two-Factor Authentication
  4. Checking OneDrive Provisioning
  5. Clearing Cookies
  6. Check cloudHQ Installation (not admin)
  7. Check cloudHQ Installation (admin)
  8. Allowing Third-Party Apps (admin)

Here are the steps for how to troubleshoot Microsoft 365 OneDrive and SharePoint authorization errors:

  1. Check Conditional Access Policies: Certain Conditional Access Policies will block all 3rd-party application and can interfere with the authentication process. If any Conditional Access is set up for your account, consider disabling these policies temporarily to see if that resolves the issue. Instructions for updating Conditional Access Policies to allow 3rd-party apps like cloudHQ can be found in the support note Conditional Access: Conditions.
  2. Disabling Two-Factor Authentication: One of the most common problems with Office SharePoint or OneDrive is that users have two-factor authentication enabled and authorization flow is not properly configured (or prohibited) by Conditional Access policy. That might cause the authorization process to fail. The workaround is to disable temporary two-factor authentication and try again:
    1. Go to the Microsoft 365 admin console and disable two-factor authentication
    2. Go back to cloudHQ and retry the authorization
    3. Go to the Microsoft 365 admin console and enable two-factor authentication
  3. Checking OneDrive Provisioning: It could be that your OneDrive account or SharePoint is not fully provisioned. Check that your OneDrive Business account is fully provisioned. Go to https://portal.office.com/onedrive to verify that your OneDrive is fully provisioned.
  4. Clearing Cookies: It could be that you are logged into two different OneDrive Business accounts. Delete all cookies, then log into cloudHQ and try again.
  5. Check CloudHQ Installation (not admin): If you are not admin, it might be that your cloudHQ installation is disabled. To check, uninstall cloudHQ from Microsoft 365, then try to authorize again:
    • Go to the My Apps section of the Microsoft 365panel. A direct link should be https://myapplications.microsoft.com/.
    • Remove all cloudHQ applications.

    • Delete all cookies.
    • Sign in again to Microsoft 365 and cloudHQ in a fresh browser session.
    • Try to authorize OneDrive Business or SharePoint again.
  6. Check cloudHQ Installation (admin): If you are admin, it might be that your cloudHQ installation is disabled. To check, uninstall cloudHQ from Microsoft 365, then try to authorize again:
    • Select Azure Active Directory > Enterprise applications.
    • Find cloudHQ application and remove them
  7. Allowing Third-Party Apps (admin): The problem could be that Microsoft 365 is configured not to allow 3rd-party applications to be installed. To check that, your Microsoft 365 admin needs to do the following:
    • Select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings.
    • Under User consent for applications, select Allow user consent for apps
    • Select Save to save your settings.


For further reference, please visit Application Access in Microsoft Azure.

Tagged: