Sharepoint::Session::UnknownAuthenticationError (Sharepoint::Session::UnknownAuthenticationError):

[tahawkins21]

I am using this gem to connect to SharePoint Online (commercial cloud).
It was working yesterday, but today we are receiving Sharepoint::Session::UnknownAuthenticationError during authentication.
During get_access_token, @RTA and @fed_auth are nil.

Maybe a change on MS side?

The response body contains the following:

    <div id="ms-error-header" class="ms-pr">
            <h1 class="ms-core-pageTitle">

    Something went wrong

            </h1>
            <div>

            </div>
    </div>
    <div id="ms-error">
            <div id="ms-error-top">

            </div>
            <div id="ms-error-content">
                    <div id="ms-error-error-content">
                            <div id="DeltaPlaceHolderMain">

We're sorry, sign-in isn't working right now. But we're on it! Please try again later.

            </div>
            <div class="ms-spo-solutionItems">
              
            </div>
      </div>
      <div id="ctl00_PlaceHolderMain_ErrorDisplay_TechnicalHelpSection">
              <div class="ms-spo-technicalSection">
                    <div class="ms-textLarge ms-spo-technicalSectionHeader">
                      If this problem persists, contact your support team and include these technical details:
              </div>

[Plaristote]

I unfortunately no longer have access to any Sharepoint sites, and I can't test this gem anymore. There doesn't seem to be any free plans either.

I'd like to keep maintaining this gem, but I'm afraid I don't have the means to.

[diiegopaiivam]

I have the same error. Will the gem be discontinued?

[tahawkins21]

I have the same error. Will the gem be discontinued?

Microsoft disabled legacy authentication for most tenants.
I ended up forking this gem and modifying the authentication to support client secretes and certificates via Oauth2.
Not sure if I will submit a PR here or continue to maintain my fork independently.

https://github.com/tahawkins21/sharepoint-ruby

However, my experience is that the secrets on the app registration in Entra will not work - you get an error "unsupported app only token". You will need to use certificates.

The (rough) steps I took:

• Create an app registration in Entra
• Under certificates & secrets, create a self-signed cert and upload there. (https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-self-signed-certificate)
• Under API Permission - give the app registration Applicaition permissions for SP: Sites.ReadWrite.All
• Then use my forked gem to connect by overwriting the default session object

Here's an example

  def authenticate_to_sharepoint(credentials)
      site = Sharepoint::Site.new 'contoso.sharepoint.com', 'mysitename', prefix: "sites"
  
      # Use certificate authentication by overwriting the default session object
      site.session = Sharepoint::CertificateAuth::Session.new(site)
  
      site.session.authenticate(
        client_id: credentials['client_id'], #The client ID of the App Registation in Entra
        tenant_id: credentials['tenant_id'], #Your tenant ID
        resource: credentials['resource'], #"https://contoso.sharepoint.com/"
        certificate_path: credentials['certificate_path'], #Path to the private key
        certificate_thumbprint: credentials['certificate_thumbprint'] #Thumbprint of the certificate (can find in Entra)
      )
  
      return site
    end

There may be a better way to do this, but this was a quick refactor to get my application working again.