Oauth 2.0 Authorization Code Flow | Microsoft Graph

[@AbhishekMishra-vr7or]

One of the best video in youtube for OAuth Authorization code flow test using Postman.

[@MuhammadFarhan-tg3pd]

Very Nice and Methodical explanation. Great work with all the videos!

[@ConceptsWork]

Glad you like them!

[@AshutoshMohanty07]

Thanks for the simplified understanding. Must recommendation for anyone developing oauth 2.0 supported logins!

[@ABANIME670]

I would like to how multitenant SSO work. How can i achieve it. How to get the help related.

[@buskinglankans]

Good tips man. Please share more workflow related videos :)

[@sathyanarayanandhanuskodi1734]

Man you really helped me. I am trying to do this for past 2 days

[@somyaindrakanti327]

Hey there the structured "POST request to token endpoint" has incorrect endpoint I guess. It has to be to token? Rather than authorize?? Please check and correct me if I am wrong

[@ConceptsWork]

Thanks Somya, Much appreciated. Yes, you are absolutely right, at - 6:23 the text shown in the request should be at token endpoint, whereas while showing with postman at 11:33, it was in place.

[@НереальнаяАвстралия]

thank you! you are the best!

[@ConceptsWork]

Glad it helped!

[@GeoffreyHibon]

I like so much you videos!!!

[@jerrysabbagh1499]

Step 4. shouldnt the endpoint end with Token instead of Authorize again?

[@lennypuente5926]

Great video! Though I was wondering, I can't really figure out how to access the code that gets sent after step 3, where exactly is it saved and how can you use it for step 4?

[@userJohn123]

Is it possible to automate the login process via Microsoft? I mean can we skip the part to type in username and password ?

[@sc8916]

Very useful information and demo!

[@acavaelnick]

Really useful, thanks

[@ConceptsWork]

Glad to hear that!

[@jerrysabbagh1499]

In Step 3, is that code sent as a redirect as to the client browser?

[@bipinptkr12]

Thank for knowledge. I have to follow Authorization flow even I have the username and password in background but In my web application I don't want to show pop up of microsoft login. So how I can access token by passing username and password with itself in Authorization code request i.e. single call.only

[@rathnapallikrishnapraksh9908]

How this is able to identify against replay detection?

[@vijayuttekar2108]

HI I want to Join concepts work , however transaction failed , could you please and confirm

[@mikecmw8492]

Hello Concepts ji, how can I get a token on behalf of a user if they are already logged into their machine? Meaning they are using an app that needs authentication and token to access the api. So I was told to just use the user's email but where would I put that in the flow to get a token for them?

[@microsoftsoft3014]

Nice video, good explanation, I have a question, can I implement OAuth2 authorization with code flow to call an API from another API?

[@jithinksunil7025]

Nice explanation

[@bulujena4302]

Is the postman only restricted to test Authorization Code Flow or we can check other work flow as well. In your previous video you had mentioned Generic flow of Oauth, is that same as Authorization Code Flow.

[@ConceptsWork]

No, with postman you can check the other methods as well. We have posted client credential flow as well.

[@jeanzhang6152]

Thanks Video, it is helpful. my first question is that the code for end point of token is the code from a property "Code" of a class "'Microsoft.Owin.Security.Notifications.AuthorizationCodeReceivedNotification" thanks Jean

[@sprasadgr]

Hi, Have you made the video for Enterprise application, if yes kindly provide the link. Thank you!!!

[@ConceptsWork]

Yes I have

[@sprasadgr]

@@ConceptsWork can you please provide the link?

[@kartikparmar8459]

Can you please help with the complete PHP code for auth 2.0 Authorization Code Flow?

[@MrMor-hx9hg]

Hi kartik, I need the same help now but no resources found on internet for php . Can you pls help me . Pls reply i need it in urgent.

[@syedimran7586]

how to get new token using refresh-token for grant_type=authorization_code

[@ConceptsWork]

You have to send post request to token endpoint, with the refresh token.

[@GirishBapatpune]

Awesome

[@itsdd9873]

Good Video, What is benefits to use postman instead of Microsoft Graph, ?

[@ConceptsWork]

Microsoft graph portal is used to access information directly once the access is approved, where postman is tool that you can access to test your applications privelages. For example if your app vendor contacts you for clientid and client secret and lets you know about the specifc permission they need, you can test your app(ClientID), privelage from POSTMAN before giving the details to your app vendor.

[@itsdd9873]

@@ConceptsWork Thanks much clear now.

[@dimitrisbellos01]

Man, I need to use HTTP request in microsoft flow. I have 403 Forbidden error. Can you show something specific, or not?

[@ConceptsWork]

please reach out to me at [e-mail]

[@manasbeura9406]

is rediect uri optional or mandatory ?? also can i implement this in oracle soa bpel??

[@ConceptsWork]

Redirect URI is optional "" After completing its interaction with the resource owner, the authorization server directs the resource owner's user-agent back to the client. The authorization server redirects the user-agent to the client's redirection endpoint previously established with the authorization server during the client registration process or when making the authorization request.

[@manasbeura9406]

@@ConceptsWork can we give a null value in the redirect uri section while registering a new client ??

[@ConceptsWork]

May I know the purpose behind mentioning null ?

[@oluwatobioyewole1501]

Thanks for the video, is it possible to make a token request without having to sign in ?

[@ConceptsWork]

Please check the video of client credential flow.

[@Sharukhkhan-br7pw]

what is this CLIENT_ID?

[@lennypuente5926]

The client id is the application id of your azure application that you can find in the azure portal in your application overview.

[@bondsandeepm]

Once you register the app, you will get Application (client) ID, Directory (tenant) ID

[@adhinarayana9954]

Is this series cover total Azure AD?

[@ConceptsWork]

Most of the components, let me know if you can’t find something, will try to add

[@adhinarayana9954]

@@ConceptsWork Azure Active Directory monitoring section can you explain

[@HardikVadariya]

Thanks for the video! Can we do it in multi tenant? If I want to get Dynamics 365 data using Graph API, can I? If yes, then How?

[@ConceptsWork]

Yes, you can implement his with multi-tenant applications. As of now there are very limited set of api's available, please check the link docs.microsoft.com/en-us/graph/dynamics-business-central-concept-overview

[@АндрейЖуравлёв-т4ж]

thanks

[@techiesahal8384]

kzbin.info/www/bejne/d6exlGSmZ62sras 6:25, is Authorize and Token endpoint the same, when i see for my tenant as you showed from azure portal i see those two are different. Thanks for your clarification. Good video.