Configuration Issue Preventing Authentication
Resolve authentication configuration errors during Office 365 migrations caused by domain mismatches or expired credentials.
Overview
Error Message
"A configuration issue is preventing authentication - check the error message from the server for details. You can modify the configuration in the application registration portal."
This error occurs when the Azure AD application registration cannot authenticate properly. There are two primary causes for this issue, each requiring different resolution steps.
Cause 1: Domain Migration Mismatch
When This Occurs
After completing a domain cutover, the Cloudiway portal configuration may be out of sync with the actual domain state in your tenants.
During tenant-to-tenant migrations, domains are moved from the source tenant to the target tenant. If the connector configurations in Cloudiway aren't updated to reflect these changes, authentication will fail.
Resolution Steps
- 1 Update Source Connector
Navigate to the source connector configuration and remove any domains that have been migrated away.
- 2 Update Target Connector
Add the newly migrated domains to the target connector configuration.
- 3 Save and Verify
Confirm all changes are saved in the portal and test the connection.
- 4 Restart Migration
Retry the migration task that was failing.
Domain Configuration State
Before (Incorrect)
Source Connector:
company.com (moved!)
Target Connector:
target.onmicrosoft.com only
After (Correct)
Source Connector:
source.onmicrosoft.com
Target Connector:
company.com + target.onmicrosoft.com
Cause 2: Invalid or Expired Client Secret
When using manual connector configuration with client secrets, this error occurs when:
- The client secret has expired
- The client secret value was entered incorrectly
- The client secret was deleted from Azure AD
- Copy/paste errors introduced extra characters
Resolution Steps
- 1 Access Azure Portal
Go to portal.azure.com → Microsoft Entra ID → App registrations
- 2 Generate New Client Secret
Navigate to Certificates & secrets → Client secrets → New client secret
- 3 Copy Secret Value Immediately
The secret value is only shown once - copy it immediately after creation
- 4 Update Cloudiway Connector
Paste the new client secret value into the corresponding connector configuration
Client Secret Expiration
Client secrets have expiration dates. Set a calendar reminder to renew secrets before they expire to avoid migration interruptions.
Prevention Tips
Use Certificates
Certificates are more secure and have longer validity periods than client secrets.
Set Reminders
Create calendar reminders for credential renewal before expiration.
Document Changes
Keep records of domain moves and connector updates during migrations.
Test After Cutover
Always verify connector connections after domain migrations.