如何为原生应用实现管理员同意流程? [英] How to implement admin consent flow for native app?

问题描述

如何使用权限范围需要管理员同意的 O365 API 为原生应用实施管理员同意流程?

How can I implement admin consent flow for native app using O365 APIs of which permission scopes require admin consent?

推荐答案

管理员同意在您的正常身份验证流程中带外"发生.为此，您首先需要通过以下方式进行管理员身份验证:

Admin Consent happens "out of band" from your normal authentication flow. To do this, you'll first need and Admin authenticate by going to:

https://login.microsoftonline.com/common/adminconsent?<你的参数>.

您可以在您的应用中提供此链接.通常，您会首先尝试对它们进行身份验证，并向它们显示进程失败的 Admin Consent 选项.

You can provide this link within your app. Typically you would first attempt to authenticate them and present them with the Admin Consent option that process fails.

一旦管理员同意，用户将能够使用 OAUTH 通过标准端点进行身份验证:

Once an Admin grants consent, users will be able to use OAUTH to authenticate via the standard endpoint:

https://login.microsoftonline.com/common/oauth2/authorize?<你的参数>

这篇关于如何为原生应用实现管理员同意流程?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！