0

As per the Microsoft documentation, it is expecting us to use implicit flow for Single Sign On between Bot and Single Page Application. At the same time, Microsoft recommends us to move to auth code flow. Our client's Azure AD team is not allowing Implicit flow anymore. Can auth code flow work for SSO between SPA and Azure Bot?

Bot framework using implicit flow https://learn.microsoft.com/en-us/microsoftteams/platform/bots/how-to/authentication/auth-aad-sso-bots

Implicit flow https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

1 Answer 1

0

Create a bot application.

enter image description here

Go to ADD – App registration (https://go.microsoft.com/fwlink/?linkid=2083908)

enter image description here

Register one application

enter image description here

Go to Expose an API

enter image description here

Get the Application ID (Client ID)

enter image description here

Go to Expose an API

enter image description here

Paste the App ID and click on Save and Continue

enter image description here

enter image description here

Go to Client application and Click on Add a Client application

enter image description here

enter image description here

Go to Authentication and Click on Add a Platform

enter image description here

Click on Single page application.

enter image description here

Give the application redirection URI details.

enter image description here

Click on Configuration in Bot settings

enter image description here

Under configuration. Click on Add OAuth connection. Fill the required details.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.