Select Page

MetaServer > Help > Troubleshoot > Export to SharePoint / Email with OAuth2

How to use OAuth 2.0 with Export to SharePoint / Email

Originally, our Export to SharePoint and Email Connectors for MetaServer and Tungsten / Kofax Express 3.2 used basic authentication. This has been replaced by OAuth 2.0 by Microsoft starting from 2018.

Since August 2025, Microsoft completely disabled basic authentication, which caused login issues for our Export to SharePoint and Email connectors and functions for MetaServer and Tungsten / Kofax Express version 3.2.

Solution:

Step 1) Update

° For MetaServer: Make sure your MetaServer version is 3.1.32.72 or more recent.

You can download the latest version of MetaServer from our Downloads page:
https://www.capturebites.com/download/

° For Tungsten / Kofax Express:

Export to SharePoint:

Migrate to Kofax Express 3.3 and version 3.3.12 of our Export to SharePoint connector.

IMPORTANT: This is only applicable if you use SharePoint Online. If you use an On-Premise SharePoint server, you'll need to use the legacy version 3.3.11 for the Export to SharePoint connector.

Export to Email:

Migrate to Kofax Express 3.3 and version 3.3.12 of our Export to Email connector.

You can find instructions on how to upgrade your Kofax Express 3.2 system to 3.3 here:
https://www.capturebites.com/2021/12/06/ready-kxp33/#01

You can sign up for a trial of Tungsten / Kofax Express 3.3 from Tungsten Automation's website. This will install the base software with a trial license which you can then later upgrade to a perpetual license. The fix pack can be downloaded through Tungsten / Kofax Express’ release information page:

Kofax Express 3.3:
https://www.tungstenautomation.com/products/express/trial

Kofax Express Fix Pack:
https://knowledge.tungstenautomation.com/bundle/z-kb-articles-salesforce4/page/24515.html

You can find the latest version of our connectors for Tungsten / Kofax Express 3.3 on our Downloads page:

Export to Email:
https://www.capturebites.com/download/#02-08

Export to SharePoint
https://www.capturebites.com/download/#02-19

Step 2) Grant Application Access Rights

- Instructions for the Export to SharePoint connector

- Instructions for Email connectors and functions (Import, Export, Alerts).

When you first log in to SharePoint from the Export to SharePoint setup, a process will start to set the permissions of the Export to SharePoint connector correctly in the Azure Entra ID Enterprise Applications section.

NOTE: This permission approval process is applicable to both the Tungsten / Kofax Express 3.3 and MetaServer solution.

NOTE: The following approval process to give the Export to SharePoint connector access to SharePoint is a one-time process.

When a regular, non-admin user logs in to SharePoint through our connector, you will get a message that the connector cannot connect before an admin gives permission.

Step 1: Enter a justification, like "MetaServer requires access to Sharepoint" and press the "Request approval" button.

Step 2: Your company's admin will receive an email with the request for permission.

Step 3: the admin needs to press "Review Request" which opens the "Enterprise Applications" section in the Azure Portal.

After logging into the Azure portal, the admin selects Export to SharePoint in the Admin consent requests section and presses Review permissions and consent.

Step 4: the admin reviews the list of permissions and presses the "Accept" button.

Step 5: The user who requested access will now receive a message that the request was approved.

The user will now be able to login to SharePoint from our Export to SharePoint connectors.

NOTE: The following approval process to give the Export to SharePoint connector access to SharePoint is a one-time process.

If you are able to log in as an admin in your Export to SharePoint connector, you will be able check a box called "Consent on behalf of your organization".

This will grant the permissions and give the connector access to SharePoint immediately.

If you need to restart the permission approval process, you can do this using the following steps:

Step 1) Find the “Export to SharePoint” application in the Entra ID \\ Enterprise Applications section.

Step 2) Select "Export to SharePoint" and open the "Properties" section. At the bottom you will find the "Delete" button.

You can then login to the Export to SharePoint connector again and the permission approval process will start from the beginning.

If the above solution does not work, please contact us and describe your problem as detailed as possible.

Your SharePoint application access rights can be managed in your Entra ID Admin Center:
https://entra.microsoft.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview

Step 1) Go to the Entra Admin Center and select "Enterprise applications".

Step 2) Select “Export to SharePoint”. In the left menu, press “Permissions“.  Next, press the blue “Grant admin consent for CaptureBites” button.

Step 3) The permission screen will pop-up. Press "Accept".

IMPORTANT: If you want to limit the rights to the minimum required permissions, only keep the 5 listed, required permissions in the table below and revoke all the other permissions.

Minimum Permissions

API Name Claim value Permission Type
Microsoft Graph offline_access Maintain access to data you have given it access to Delegated
Microsoft Graph openid Sign users in Delegated
Microsoft Graph profile View users’ basic profile Delegated
Office 365 SharePoint Online AllSites.Read Read items in all site collections Delegated
Office 365 SharePoint Online AllSites.Write Read and write items in all site collections Delegated

To revoke a permission, press the three dots next to the permission and press "Revoke permission".

If the above solutions don't work, please contact us and describe your problem as detailed as possible.

When you first log in to your Office 365 account from the setup window of the following connectors / functions, a process will start to set the permissions correctly in the Azure Entra ID Enterprise Applications section:

Product / Module Base Software Application Name
Export to Email Tungsten / Kofax Express 3.3 CaptureBites MetaServer
Export to Email Tungsten TotalAgility / Kofax Capture CaptureBites MetaServer
Export to Email MetaServer CaptureBites MetaServer
Import Email MetaServer CaptureBites MetaServer
Email Alert MetaServer CaptureBites MetaServer

NOTE: This permission approval process is applicable to Tungsten / Kofax Express 3.3, Tungsten TotalAgility, Kofax Capture and MetaServer solution.

Despite its name, the "CaptureBites MetaServer" application is used for the Email Connectors and functions' Application Access Rights for both Tungsten / Kofax and MetaServer software.

NOTE: The following approval process to give the Export to Email connector access to your Office 365 account is a one-time process.

When a regular, non-admin user logs in through our connector, you will get a message that the connector cannot connect before an admin gives permission.

As soon as the user who requested access has received confirmation from their admin that the request was approved, retry logging in.

The user will now be able to login to their mailboxes from our Export to Email connectors.

NOTE: The following approval process to give the Export to Email connector access to mailboxes via IMAP is a one-time process.

If you are able to log in as an admin Office 365 account in your Export to Email connector, you will be able check a box called "Consent on behalf of your organization".

This will grant the permissions and give the connector access to mailboxes via IMAP immediately.

If you need to restart the permission approval process, you can do this using the following steps:

Step 1) Find the “CaptureBites MetaServer” application in the Entra ID \\ Enterprise Applications section.

Step 2) Select "CaptureBites MetaServer" and open the "Properties" section. At the bottom, you will find the "Delete" button.

You can then login with an Office 365 account in the Export to Email connector again and the permission approval process will start from the beginning.

If the above solution does not work, please contact us and describe your problem as detailed as possible.

Your CaptureBites MetaServer application access rights can be managed in your Entra ID Admin Center:
https://entra.microsoft.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview

Step 1) Go to the Entra Admin Center and select "Enterprise applications".

Step 2) Select “CaptureBites MetaServer”. In the left menu, press “Permissions“.  Next, press the blue “Grant admin consent for CaptureBites” button.

Step 3) The permission screen will pop-up. Press "Accept".

As a reference, the below permission are the minimum, required permissions:

Minimum Permissions

API Name Claim value Permission Type
Microsoft Graph offline_access Maintain access to data you have given it access to Delegated
Microsoft Graph EWS.AccessAsUser.All Access mailboxes as the signed-in user via Exchange Web Services Delegated
Microsoft Graph User.Read Sign in and read user profile Delegated
Microsoft Graph openid Sign users in Delegated
Microsoft Graph email View users' email address Delegated
Microsoft Graph profile View users’ basic profile Delegated
Microsoft Graph IMAP.AccessAsUser.All Read and write access to mailboxes via IMAP. Delegated
Microsoft Graph SMTP.Send Send emails from mailboxes using SMTP AUTH. Delegated
Office 365 SharePoint Online AllSites.Read Read items in all site collections Delegated
Office 365 SharePoint Online AllSites.Write Read and write items in all site collections Delegated

If the above solutions don't work, please contact us and describe your problem as detailed as possible.

CaptureBites Newsletter - Subscribe


Please check the box below to agree to the privacy policy and continue *


NOTE: if you're experiencing trouble with submitting this form, please try again using another browser.