Skip to main content

All Questions

0 votes
1 answer
415 views

Microsoft oauth consent page doesn't use the scopes I requested

I am using msal-node to get oauth access tokens. In my code, I have the following scopes: scopes: [ "https://graph.microsoft.com/People.Read.All", "https://graph.microsoft.com/...
Datguy's user avatar
  • 141
0 votes
1 answer
433 views

Azure DEVOPS make pull request using on-behalf-of flow

I am trying to figure out what is needed so that my application is able to make a pull request on behalf of my user. I have an app registration, for this app registration I am requesting the following ...
Liviu's user avatar
  • 1,083
1 vote
1 answer
1k views

How to get client_id and scope of the app registered in Azure?

I have an app registered in Azure, and it needs to be able to communicate with dozens of different apps in my organization (those apps are also registered in Azure). The problem is that I do not know ...
shuraosipov's user avatar
0 votes
1 answer
318 views

Azure/Microsoft Identity Platform - Cannot Retrieve Access Token from Token Endpoint (PHP)

I'm trying to write a custom web app that utilizes the Microsoft Identity Platform to authenticate and authorize users. I'm able to successfully authenticate when calling the /authorize endpoint, and ...
smartroof's user avatar
0 votes
1 answer
368 views

Why should I enabled OAuth from APIM when it is already secure using Microsoft Identity platform

I have created a Web API using .net core 5. I have secured the app using the Microsoft Identity platform. Clients app are able to get to the resource based on their scope/role. So I know that my api ...
Jashvita's user avatar
  • 621
0 votes
3 answers
2k views

How do I author Azure API Management policy to allow either a scope or a role

I'd like to restrict an API for a set of AD users using scopes and a set of daemon apps using app roles. However, following Azure APIM policy will check only if both claims are present. How do I ...
VictorSimplify's user avatar
0 votes
1 answer
1k views

Azure AD Ms Identity callback URL (error AADSTS50011)

I'm integrating Azure AD and MS-Identity on a web app with Angular. It works on my machine, but when I deploy it, I get an issue with the callback URL. First, to make sure the callback URL is ok, I ...
evg02gsa3's user avatar
  • 581
1 vote
0 answers
366 views

Openid - Is there a way to get the state & nonce generated by Challenge method without redirection?

I have a requirement to integrate with an external authentication provider which they require us to generate the state & nonce and using these parameters as an input for the embedded JS to ...
Nhon Tran's user avatar
  • 113
5 votes
1 answer
11k views

Rare AADSTS7000215 error from Microsoft (Invalid client secret is provided)

Sometimes on trying to obtain token on: login.microsoftonline.com/common/oauth2/v2.0/token I receive the error: AADSTS7000215: Invalid client secret is provided I am sure that client_secret is ...
Mykola Shved's user avatar
0 votes
1 answer
367 views

How can I programatically access a web API that is secured with SSO?

I have a web application that contains few APIs. The web application also has a HTML page were these APIs are consumed to render the UI. The web application hosted internally but secured with ...
Arun's user avatar
  • 197
0 votes
1 answer
108 views

Microsoft Graph Identity avoid account selection again

I'm using msal4j library for identity and token management in Java Spring Boot application to access Microsoft Graph APIs. I'm following the sample code here. In the code, the TokenCache object ...
user5155835's user avatar
  • 4,672