Folder Sync OnPrem synchronization fails with 'Error scanning mailbox'

book

Article ID: 100055551

calendar_today

Updated On:

Description

Error Message

In the Event column of the Job List view of the Archive Accelerator Management Console, the error can be seen. 

The error message will appear in the corresponding AsProcess log (Ex: C:\ProgramData\Vault Solutions\Archive Accelerator\FolderSync.2025-01-21.AsProcess04.log) .  To find the specific AsProcess log scroll at the way to the right in the above Job List view.  

Error caught in ProcessMailbox while scanning mailbox.
SynchJob ending in error.
Target = User7 (Online)
Event occurred in Worker04 - Schedule(6), ReportOnly: False, MiscParameter: 0
--> MSAL.Desktop.4.30.0.0.MsalServiceException:
ErrorCode: invalid_client
Microsoft.Identity.Client.MsalServiceException: A configuration issue is preventing authentication - check the error message from the server for details. You can modify the configuration in the application registration portal. See https://aka.ms/msal-net-invalid-client for details. Original exception: AADSTS7000222: The provided client secret keys for app '0df6455f-0b89-xxxx-xxxx-635e1d411a4e' are expired.

Cause

In Folder Sync OnPrem version 1.14, there was a change to introduce Modern Authentication for O365 mailboxes.  If used, the administrator would grant consent for a built-in Azure application to be created automatically in M365. 

The secret used to create that enterprise application, 'Folder Sync' expired in Jan, 2025.  If an attempt is made to synchronize their users after that period of time, the synchronization will fail with the above error. 

Resolution

To resolve the issue, follow either of the following solutions:

  1. Install the latest Folder Sync version (newer than 1.14) that contains the new secret.
  2. Open a Support case to get the new client secret and the steps needed to implement it. 

Issue/Introduction

Folder Sync OnPrem 1.14 (v1.95.8563 binaries) synchronizations fail after Jan, 2025 with 'Error scanning mailbox'.