AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'

[tohildotnet]

Hi

I use the following config:

[SMTP-1587]
documentation = *** note: this server will work for both Office 365 and personal Outlook/Hotmail accounts ***
server_address = smtp-mail.outlook.com
server_port = 587
server_starttls = True
local_address = 0.0.0.0

[[email protected]]
permission_url = https://login.microsoftonline.com/tenant-id/oauth2/v2.0/devicecode
token_url = https://login.microsoftonline.com/tenant-id/oauth2/v2.0/token
oauth2_scope = https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send offline_access
oauth2_flow = device
client_id = Entra app id
client_secret = client secret

[emailproxy]
delete_account_token_on_password_error = True
encrypt_client_secret_on_first_use = False
use_login_password_as_client_credentials_secret = False
allow_catch_all_accounts = False

When I first send a message, i get the prompt in the log for device auth. can perform the authentication in the browser with sucess, but get this in the logs:
Caught exception while requesting OAuth 2.0 credentials for account [email protected]: {'error': 'invalid_client', 'error_description': "AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.

Any Ideas?

[tohildotnet]

found the solution. had to enable (set to yes) "Allow public client flows" on the used EntraID App registration.