如何实现本机应用程序的管理员同意流程? [英] How to implement admin consent flow for native app?

问题描述

如何使用权限范围需要管理员同意的O365 API来为本机应用实现管理员同意流?

How can I implement admin consent flow for native app using O365 APIs of which permission scopes require admin consent?

推荐答案

管理员同意在正常的身份验证流程中带外"发生.为此，您首先需要通过以下步骤对管理员进行身份验证:

Admin Consent happens "out of band" from your normal authentication flow. To do this, you'll first need and Admin authenticate by going to:

https://login.microsoftonline.com/common/adminconsent?<yours params>.

您可以在您的应用程序中提供此链接.通常，您首先会尝试对它们进行身份验证，并通过管理同意"选项向他们展示该过程失败.

You can provide this link within your app. Typically you would first attempt to authenticate them and present them with the Admin Consent option that process fails.

一旦管理员同意，用户将可以使用OAUTH通过标准端点进行身份验证:

Once an Admin grants consent, users will be able to use OAUTH to authenticate via the standard endpoint:

https://login.microsoftonline.com/common/oauth2/authorize?<your params>

这篇关于如何实现本机应用程序的管理员同意流程?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！