Use this article to troubleshoot issues when setting up or using the direct calendar integration with Google or Microsoft. For issues with the Recruiting calendar, learn how to troubleshoot the Recruiting calendar integration.

This article covers the following issues:

• You don't receive the validation email during the Google Calendar setup
• I see an "Authentication could not be confirmed" error
• I see an "Access is denied" error when connecting the Microsoft Calendar integration
• I see an "Unauthorized access" error when connecting the Exchange integration
• The Google Calendar sync stopped working with a "401 Unauthorized" access token error

Before you start

• Personio uses each employee's email address to find their calendar and sync time off. Check that the email address in each employee's Personio profile matches their Google or Microsoft calendar account.

You don't receive the validation email during the Google Calendar setup

Issue:

When setting up the Google Calendar integration, the validation email never arrives, preventing you from completing the setup.

Possible solution:

1. Confirm that the user performing the setup is a Super Admin in Google Workspace. A standard Admin account isn't enough.
2. Check that the Super Admin's Google Workspace email address matches their email address in Personio.
3. Check your spam folder. Personio sends the validation email from info@m.personio.com or info@m.personio.de.
4. Save both addresses as contacts to prevent future filtering.
5. Ask your IT team to allowlist the following Personio IP addresses: 185.189.236.69 and 185.189.236.70.

For more information on making sure Personio emails reach your inbox, see how to troubleshoot Personio system emails.

I see an "Authentication could not be confirmed" error

Issue:

When connecting the Google Calendar integration, you repeatedly receive an "Authentication could not be confirmed" error. This can happen even with admin access to both Personio and Google.

Possible solution:

1. Confirm that your Workspace Admin has installed the Personio for Google Calendar app in the Google Workspace Marketplace.
2. Confirm that the email address on your Google Workspace admin account matches your email address in Personio.
3. Open Personio in a new incognito browser window.
4. Go to Marketplace, find the Google Calendar integration, and click Connect.
5. Manually enter your Google Workspace admin credentials. Don't use a saved browser session or autofill.

If the error persists, sign out of all Google accounts in your browser. Then repeat the steps above using only your admin account credentials.

I see an "Access is denied" error when connecting the Microsoft Calendar integration

Issue:

When activating the Microsoft Calendar (Microsoft 365) integration from the Marketplace, you receive an ErrorAccessDenied or "Access is denied" error. Usually, this means that the Microsoft account used to authorize the connection doesn't have sufficient permissions in Microsoft Entra ID.

Possible solution:

1. Confirm that the account you're using holds a Global Administrator or Privileged Authentication Administrator role in Microsoft Entra ID. A standard admin role isn't enough.
2. Confirm that you have edit rights for API configurations and Marketplace integrations in Personio.
3. Open Personio in a new incognito or private browser window.
4. Go to Marketplace, find the Microsoft Calendar integration, and click Connect.
5. Manually enter your Global Administrator or Privileged Authentication Administrator credentials. Don't use a saved browser session or autofill.

I see an "Unauthorized access" error when connecting the Exchange integration

Issue:

When activating the Microsoft Exchange Calendar integration from the Marketplace, you receive an "unauthorized access" error. Usually, this means the service account used to authorize the connection is missing required Exchange permissions or has an incorrect configuration.

Possible solution:

1. Confirm that the service account has the "ApplicationImpersonation" role assigned in Microsoft Exchange. This is the specific role you need. A general admin role isn't enough.
2. Verify that the Exchange autodiscover URI entered in Personio is correct and resolves to your Exchange server.
3. Confirm that the login credentials you entered in Personio belong to the service account, not a personal or standard admin account.
4. Disconnect and reconnect the Microsoft Exchange Calendar integration to refresh the authorization.

The Google Calendar sync stopped working with a "401 Unauthorized" access token error

Issue:

The Google Calendar integration was working but has stopped syncing absences. Personio shows a "401 Unauthorized" error when requesting an access token from Google.

Possible solution:

Google is rejecting the authorization that Personio previously held. This is usually because of these reasons:

• The Google Workspace admin who originally authorized the integration lost their admin permissions, or someone deactivated their account.
• Domain-wide delegation for Personio's service account was revoked in the Google Workspace Admin Console.
• The OAuth consent expired, or an admin or a security policy revoked it.

To fix this:

1. In Personio, go to Marketplace > Connected integrations and disconnect the Google Calendar integration.
2. In the Google Workspace Admin Console, check both of the following:
   • The admin account originally used to authorize the integration is still active and holds admin permissions.
   • Domain-wide delegation for Personio's service account is still enabled.
3. Reconnect the integration in Personio using a Google Workspace admin account. The email address on that Google Workspace admin account needs to match the email address in their Personio profile.
4. Wait a few minutes and confirm that absences are appearing in Google Calendar again.