Views:

Applies to Product- Power Automate

What’s happening?
Customers are experiencing difficulties using the Outlook connector on Power Automate due to cross-tenant collaboration restrictions. Attempts to change the "restrict cross-tenant connections" settings to inbound, outbound, or both have not resolved the issue.


Reason:
This is related to a tenant isolation policy that prevents cross-tenant connections. The error messages indicate that the OAuth2 Certificate Authorization Flow has failed due to these restrictions.


Resolution:

  1. Verify Tenant Isolation Settings: Ensure that both inbound and outbound cross-tenant access settings are correctly configured in the Microsoft Entra Admin Center. Explicitly allow the tenant you are trying to connect with.
  2. Allowlist the Tenant: Add the tenant ID of the external organization to the allowlist in your tenant's settings. This can be done in the Power Platform admin center under the cross-tenant access settings.
  3. Check Authorization Flow: Ensure that the necessary certificates and permissions are correctly configured for the external tenant to resolve issues with the OAuth2 Certificate Authorization Flow.
  4. Contact Tenant Administrator: Coordinate with the admin of the external tenant to ensure that their settings allow for cross-tenant collaboration.
  5. Review Detailed Error Information: Use the specific information provided in the error messages regarding the connection owner tenant and the connection sign-in tenant to verify that all configurations are correct on both sides.
  6. Grant Application Access: If applicable, ensure that application access has been granted in the remote tenant to facilitate the connection.
For further guidance, refer to the documentation on restricting cross-tenant inbound and outbound access in Power Platform and the unallowed tenant for connection with sign-in in Power Automate.