> ## Documentation Index
> Fetch the complete documentation index at: https://docs.abbyy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Graph API connection error

> Fix the Connect to token endpoint failed error during Microsoft Graph Mail API import in ABBYY FlexiCapture by unblocking the Microsoft identity resources.

Setting up image import via Microsoft Graph Mail API requires authorization via OAuth 2.0. Sometimes, after confirmation of authorization is received, the authentication is denied with the following error message: **Flow failed. Failure info/error: Connect to token endpoint failed**.

This occurs because FlexiCapture is unable to access the following required resources:

* the marker endpoint of the Microsoft identity platform at [https://login.microsoftonline.com/common/oauth2/v2.0/token](https://login.microsoftonline.com/common/oauth2/v2.0/token)
* and/or Microsoft Graph API at [https://graph.microsoft.com](https://graph.microsoft.com/)

A connection to the ABBYY servers is established only once - during the first authorization. Once the user has been authorized on Microsoft's side, they are redirected to [https://go.abbyy.com/oauth2redirect](https://go.abbyy.com/oauth2redirect), which in turn redirects the user to [http://127.0.0.1:32023](http://127.0.0.1:32023/). The OAuth 2.0 authorization wizard uses port 32023 to receive this final response. After that, FlexiCapture sends requests to the Microsoft resources directly from the machine on which the corresponding station is installed.

Verify that your firewall settings are not blocking access to the Microsoft identity platform and the Microsoft Graph API servers. These resources should be accessible to the machine on which any of the following operations are being performed:

* Creating and/or editing a Microsoft Graph Mail API import profile on the Project Setup Station.
* Initializing image import manually on the Scanning Station or the Project Setup Station. In this case, both stations require access to the above resources.
* Automatic import from the Microsoft Graph Mail API hotfolder on the Processing Station.