Autotask PSA: Authentication Error When Configuring Microsoft Outlook Extension



When you try to configure the Autotask PSA Microsoft Outlook Extension, you encounter an error message such as, "The OTP token is invalid. Please enter a value and try again."


  • Autotask PSA Microsoft Outlook Extension 


Verify the Login Address

Review the address listed on the login tab of the Outlook Extension Options. A common cause for login failures is having the wrong Address listed on the login tab of the Outlook Extension options. When the window opens, the default URL is, rather than the user's zone-specific URL, as shown in Figure 1.

mceclip0.pngFigure 1: MS Outlook Extension - Options (click to enlarge)

Enter the address of the specific Autotask database, for example, Be sure to specify the correct Autotask zone, as indicated by the number following ww.

Using the Outlook Extension with Two-Factor Authentication (2FA) or Single Sign-On (SSO)

1. Ensure that you have the most recent version of the Microsoft Outlook Extension installed; older versions do not support 2FA or SSO.

2. Users that have set up both SSO and 2FA will see an additional dialog box on each login, which prompts them to authenticate with the Identity Provider in the same manner as when only SSO is enabled. The extension bypasses 2FA in these scenarios because the authentication occurs on the Identity Provider end, rather than in PSA. For more information, see Autotask PSA: Can I use Two-Factor Authentication (2FA) and Single Sign-On (SSO) at the same time?

Troubleshooting Two-Factor Authentication (2FA)

When using Two-Factor Authentication, you must enter the correct username and password during the initial setup, at which point you will be prompted for a one-time password. During future Outlook sessions, you will only receive a prompt for your 2FA token when you first launch the application. By default, the one-time password is masked. To display the one-time password characters, click the show checkbox.

If you do not enter the Autotask URL which corresponds with your region and instead use the generic, you will see an error message during authentication which states, "The OTP token is invalid. Please enter a value and try again," as shown in Figure 2.

This error occurs because the extension cannot correctly exchange the 2FA token with the generic URL. You must configure the application with your zone-specific URL.

mceclip1.pngFigure 2: Invalid OTP token (click to enlarge)

Troubleshooting Single Sign-On (SSO)

When using Single Sign-On, you must enter a correct username, but you can enter any value for the password field. The password is ignored when SSO is enabled; the window to authenticate through your Identity Provider will appear each time you open Outlook.

As with 2FA, you should ensure that you have your zone-specific URL entered when configuring the extension. Also, due to the way the pop-up window launches and relies on browser cookies for the SSO login flow, your browser settings must match those described in our documentation. See Configure Your Browser Settings for more information.

Additional Resources

Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Datto Community Forum or the Datto Community Online.

For more Business Management resources, see the Datto RMM Online Help and the Autotask PSA Online Help .

Still have questions? Get live help.

Datto Homepage