Setup HMA with my exchange 2013 server. Windows Outlook and ActiveSync work fine. I'm using Google as my IDP. When I setup the native mail client on my Mac, it gets all the way through the authentication and when I click OK, it goes to a Gray screen and then just sits and spins. If I use an EXO account everything works fine. What would be causing the Mail app not to complete the login to my on-prem server but works fine with an EXO account?
HTTP/1.1 403 Forbidden
Cache-Control: private
Server: Microsoft-IIS/8.5
request-id: 05bf0794-8d75-4fa4-9bf3-bfa55ae025d3
Set-Cookie: ClientId=JCA0Z9ZKEVWUHGBFJJA; expires=Fri, 29-Oct-2021 13:40:06 GMT; path=/; HttpOnly
X-CalculatedBETarget: exchdb02.ca.com
x-ms-diagnostics: 2000008;reason="The token contains not enough scope to make this call.";error_category="invalid_grant"
Strict-Transport-Security: max-age=31536000
