How to troubleshoot Microsoft 365 OneDrive or SharePoint authorization errors

  1. Introduction
  2. Configure User Consent Settings
  3. Check Conditional Access Policies
  4. Disabling Two-Factor Authentication
  5. Checking OneDrive Provisioning
  6. Clearing Cookies
  7. Check cloudHQ Installation (not admin)
  8. Check cloudHQ Installation (admin)
  9. Allowing Third-Party Apps (admin)

Here are the steps for how to troubleshoot Microsoft 365 OneDrive and SharePoint authorization errors:

  1. Set Up User Consent Options: If users cannot give consent to the Microsoft 365 app by cloudHQ, it might be turned off.
    To fix this, do the following:

    1. Log into the Microsoft Entra admin center as a Privileged Role Administrator.
    2. Go to Identity > Applications > Enterprise applications > Consent and permissions > User consent settings.
    3. In User consent for applications, choose Allow user consent for apps

    More details can be found here: in the support note Configure how users consent to applications.

    If full access isn’t feasible, then admins should let users request admin approval by enabling the option Users can request admin consent to apps they are unable to consent to​
    :

    2. During authorization the authorization the user will be prompted to request admin for approval. The admin will receive the request, and then can whitelist the application by going here: https://go.microsoft.com/fwlink/?linkid=2101016:

  2. Check Conditional Access Policies: Certain Conditional Access Policies will block all 3rd-party application and can interfere with the authentication process. If any Conditional Access is set up for your account, consider disabling these policies temporarily to see if that resolves the issue.

    Instructions for updating Conditional Access Policies to allow 3rd-party apps like cloudHQ can be found in the support note Conditional Access: Conditions.

  3. Disabling Two-Factor Authentication: One of the most common problems with Office SharePoint or OneDrive is that users have two-factor authentication enabled and authorization flow is not properly configured (or prohibited) by Conditional Access policy. That might cause the authorization process to fail. The workaround is to disable temporary two-factor authentication and try again:
    1. Go to the Microsoft 365 admin console and disable two-factor authentication
    2. Go back to cloudHQ and retry the authorization
    3. Go to the Microsoft 365 admin console and enable two-factor authentication
  4. Checking OneDrive Provisioning: It could be that your OneDrive account or SharePoint is not fully provisioned. Check that your OneDrive Business account is fully provisioned. Go to https://portal.office.com/onedrive to verify that your OneDrive is fully provisioned.
  5. Clearing Cookies: It could be that you are logged into two different OneDrive Business accounts. Delete all cookies, then log into cloudHQ and try again.
  6. Check CloudHQ Installation (not admin): If you are not admin, it might be that your cloudHQ installation is disabled. To check, uninstall cloudHQ from Microsoft 365, then try to authorize again:
    • Go to the My Apps section of the Microsoft 365panel. A direct link should be https://myapplications.microsoft.com/.
    • Remove all cloudHQ applications.

    • Delete all cookies.
    • Sign in again to Microsoft 365 and cloudHQ in a fresh browser session.
    • Try to authorize OneDrive Business or SharePoint again.
  7. Check cloudHQ Installation (admin): If you are admin, it might be that your cloudHQ installation is disabled. To check, uninstall cloudHQ from Microsoft 365, then try to authorize again:
    • Select Azure Active Directory > Enterprise applications.
    • Find cloudHQ application and remove them
  8. Allowing Third-Party Apps (admin): The problem could be that Microsoft 365 is configured not to allow 3rd-party applications to be installed. To check that, your Microsoft 365 admin needs to do the following:
    • Select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings.
    • Under User consent for applications, select Allow user consent for apps
    • Select Save to save your settings.


For further reference, please visit Application Access in Microsoft Azure.

Tagged: