- Shipped
- September 4, 2026 at 2:47 AM UTC
- Author
- Kamo
- Commit
- 8ae38b3
Google, Microsoft 365 and Zoho mailbox connects now read whichever app the org is on — its own registration if it brought one, otherwise Kamo's platform app. The org is threaded through the refresh as well as the connect. A grant issued to an org's own app can only be refreshed with that app's client id and secret, so reading the platform pair there would have started failing the moment an org stopped using Kamo's app — a day or an hour after connecting, not immediately, which is the worst kind of failure to diagnose. The Microsoft tenant follows the same rule: an org on its own Entra app usually wants its own tenant rather than the multi-tenant "common".