Skip to main content

I can't connect my OneDrive account to the plugin

Problem

When you try to connect a new OneDrive or SharePoint account to the plugin, the connection fails with a message indicating that your hosting server cannot connect to Microsoft. Depending on the cause, you may see a message about Microsoft’s sign-in service, Microsoft Graph, DNS, or a secure connection.

Cause

The plugin needs to communicate with Microsoft's servers during the account authorization process. If your WordPress server cannot reach these services, the connection cannot be completed.

This is usually caused by a server or hosting environment issue, such as an outbound firewall, proxy, DNS configuration, TLS/SSL configuration, routing problem, or security product blocking the connection.

The plugin checks two Microsoft services during the connection process:

  • Microsoft sign-in: login.microsoftonline.com
  • Microsoft Graph: graph.microsoft.com

If you are managing your own server, you can use the information below to identify the cause. If your website is hosted by a hosting provider, we recommend sending them the error message and asking them to investigate the relevant connection from the WordPress server.

Identifying and resolving the connection error

"Your hosting server is being blocked before it reaches Microsoft's sign-in service."

This indicates that your server is being blocked when trying to reach Microsoft's OpenID configuration service.

Ask your hosting provider to investigate outbound HTTPS access to:

login.microsoftonline.com on TCP port 443

They should also check whether a proxy, WAF, NAT configuration, outbound firewall, or the reputation of the server's outbound IP address is preventing the connection.

"Your hosting server cannot find the Microsoft service address."

This indicates a DNS resolution problem. The server cannot resolve Microsoft's hostname.

Ask your hosting provider or server administrator to check the DNS resolver configuration, DNS forwarding, and firewall rules affecting DNS requests.

Make sure the following domains can be resolved from the WordPress server:

  • login.microsoftonline.com
  • graph.microsoft.com

"Your hosting server cannot establish a connection to Microsoft's sign-in service."

This indicates that the server could not establish a connection to Microsoft's sign-in service. Common causes include a timeout, refused connection, blocked outbound TCP 443, proxy problems, or IPv4/IPv6 routing issues.

Ask your hosting provider to check:

  • Outbound HTTPS/TCP 443 access
  • Firewall rules
  • Proxy configuration
  • NAT configuration
  • IPv4 and IPv6 routing
  • Possible rate limiting

"Microsoft sign-in is reachable, but your hosting server cannot reach Microsoft Graph to finish connecting the account."

This means the Microsoft sign-in service could be reached, but the server could not connect to Microsoft Graph.

Ask your hosting provider to verify that outbound HTTPS access to graph.microsoft.com on TCP port 443 is allowed and that there are no proxy, firewall, routing, IPv4/IPv6, or rate-limiting issues.

"Your hosting server cannot establish a trusted secure connection to Microsoft."

This indicates a TLS/SSL problem between your server and Microsoft. The server may be unable to verify Microsoft's certificate or complete the TLS negotiation.

Ask your hosting provider or server administrator to check and, if necessary, update:

  • cURL
  • OpenSSL
  • System CA certificates
  • Server time and date

They should also check whether a TLS-inspecting proxy is interfering with the connection and whether the server supports Microsoft's current TLS configuration.

 

What should I ask my hosting provider to check?

You can send your hosting provider the exact error message from the plugin and ask them to test outbound HTTPS connections from the WordPress server to:

  • https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration
  • https://graph.microsoft.com/v1.0/

Please note that testing these URLs from your own computer is not sufficient. The connections need to work from the server where your WordPress installation is hosted.

Your hosting provider should also check their outbound firewall, proxy, WAF, DNS, NAT, routing, and TLS/SSL configuration.

Once the server can successfully communicate with Microsoft's services, you should be able to connect your OneDrive account normally

Related to