Custom Auth - Microsoft Graph API - Refresh access tokens using apps identity rather than a users delegated identity

@AJVancattenburch

Quite the opposite actually! :sweat_smile:

Here's a few cherry-picked quotes from the MS Docs regarding OAuth 2.0 client credentials flow

The OAuth 2.0 client credentials grant flow permits a web service to use its own credentials, instead of impersonating a user to authenticate when calling another web service.

This type is commonly used for server-to-server interactions that must run in the background, without immediate interaction with a user

In the client credentials flow, permissions are granted directly to the application itself by an administrator. When the app presents a token to a resource, the resource enforces that the app itself has authorization to perform an action since there is no user involved in the authentication.

Basically, client credentials just means using an app's identity as the means of authentication and NOT the user's.

Which DOES sound like what you're after here, if I'm understanding your post correctly? :wink:

Let me know if that helps :pray:

2 Likes