After you configured WPO365 to use app-only tokens and created / updated the App registration in Microsoft Entra ID, you should run the WPO365 Plugin self-test to confirm that WPO365 can indeed benefit from application permissions.

Perform the following steps to start the self-test and review the outcome.

• Go to WP Admin > WPO365 > Plugin self-test.
• Click Start self-test.
• If you configured single sign-on you will be asked to sign in with your test account. Otherwise you must enter a valid Microsoft 365 / Azure AD user name in the corresponding input field. WPO365 will use this account for some of its test – for example to retrieve a user’s profile, profile picture and Azure AD groups.
• Scroll to the section PROFILE+ and check if the test to retrieve a user’s profile using application-permissions has passed successfully.
• Scroll further to the section AVATAR and check if the test to retrieve a user’s profile picture using application-permissions has passed successfully.
• Optionally, scroll further to the section ROLES + ACCESS and check if the test to retrieve a user’s Azure AD group memberships has passed successfully.