Azure 使用授权代码流的单页应用程序之间的机器人单点登录

Question

As per the Microsoft documentation, it is expecting us to use implicit flow for Single Sign On between Bot and Single Page Application. At the same time, Microsoft recommends us to move to auth code flow. Our client's Azure AD team is not allowing Implicit flow anymore. Can auth code flow work for SSO between SPA and Azure Bot?

Bot framework using implicit flow https://learn.microsoft.com/en-us/microsoftteams/platform/bots/how-to/authentication/auth-aad-sso-bots

Implicit flow https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-implicit-grant-flow

Answer 1

Create a bot application.

Go to ADD – App registration ( https://go.microsoft.com/fwlink/?linkid=2083908 )

Register one application

Go to Expose an API

Get the Application ID (Client ID)

Go to Expose an API

Paste the App ID and click on Save and Continue

Go to Client application and Click on Add a Client application

Go to Authentication and Click on Add a Platform

Click on Single page application.

Give the application redirection URI details.

Click on Configuration in Bot settings

Under configuration. Click on Add OAuth connection. Fill the required details.