SharePoint Online Spoke: Error Fetching Token - Key Not Found, Thumbprint of Key Used by Client

[edosky]

Hi Everyone,

We are currently trying to setup our microsoft sharepoint online spoke, but we are getting the error below

OAuth flow failed. Verify the configurations and try again. Error detail:invalid_client, AADSTS700027: The certificate with identifier used to sign the client assertion is not registered on application. [Reason - The key was not found., Thumbprint of key used by client: 'XXXXX', Please visit the Azure Portal, Graph Explorer or directly use MS Graph to see configured keys for app Id 'XXXXXX'. Review the documentation at https://docs.microsoft.com/en-us/graph/deployments to determine the corresponding service endpoint and https://docs.microsoft.com/en-us/graph/api/application-get?view=graph-rest-1.0&tabs=http to build a query request URL, such as 'https://graph.microsoft.com/beta/applications/XXXXXX']. Trace ID: XXXXXXXXX Correlation ID: XXXXXXXX Timestamp: 2025-03-10 12:05:09Z, https://login.microsoftonline.com/error?code=700027

-We have followed the steps documented in Configure Microsoft SharePoint Online connection record

-We also saw this kba SharePoint Online Spoke: Error Fetching Token - Key Not Found, Thumbprint of Key Used by Client - Su... but we have already encoded the thumbprint uploaded to the application in azure to base64

-The certificates were also successfully validated after we uploaded them to System Definition > Certificates > Microsoft SharePoint Online Certificate (we even tried both .jks file and .pfx file and both were validated successfully)

-We also validated that the permissions provided was Select Sites.FullControl.All under application permissions as mentioned in the documentation and we also found this Solved: Re: Confused about Sharepoint Spoke setup - Page 2 - ServiceNow Community

If anyone has experienced this before and was able to fix the issue, we are keen on hearing what you did. Thank you

[Harini17]

I'm facing the exact same issue. Thumbrint is validated and all the configurations seem to be fine. Receiving this error while trying to renew the certificate. The setup was working fine for the past 1 year. With the new ceritificate, it fails to fetch the token.

[CEwing]

did you ever get a response?  I'm in the same boat.  Support hasn't been helpful.