为输入值 scope 提供的值对 OnlineMeeting.ReadWrite 无效

Question

I am trying to create meeting on behalf of a user for that I am trying to get the code. I have registered the app on Azure. Also generated Application(Client) ID I have also added the required permission in the API. But when I am visiting this page the page asks for the email id but once the users fill the email id it says The provided value for the input value scope is not valid for OnlineMeeting.ReadWrite in the redirect URL.

Please guide me to know what I am missing here.

Edit 1: As suggested by @Rukmini I tried this and here is the relevant details.

To obtain the the code I am building url like this image

This does not work when I pass the OnlineMeetings.ReadWrite scope. But when I pass https://graph.microsoft.com/.default as scope it works and I am able to authenticate and generate a code. Then I can use that code to get the access token like following image. But using this access token I can not create the meeting as it does not have the OnlineMeetings.ReadWrite scope as stated in this doc ** https://learn.microsoft.com/en-us/graph/api/application-post-onlinemeetings?view=graph-rest-1.0&tabs=http**[![enter image description here] 3 ] 3

Let me know what I can do to generate code and access token for the OnlineMeetings.ReadWrite scope so that I can create the meeting on users behalf. Thanks

Answer 1

I tried to reproduce the same in my environment and got the results successfully like below:

I created an Azure AD Multi-Tenant Application:

I granted Admin Consent to the API permissions like below:

I generated the code by using below endpoint and authorizing it via browser:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?
&client_id=ClientID
&response_type=code
&redirect_uri=https://jwt.ms
&response_mode=query
&scope=OnlineMeetings.ReadWrite
&state=12345

Now, I generated access token by using the below parameters:

https://login.microsoftonline.com/common/oauth2/v2.0/token

client_id:ClientID
client_secret:ClientSecret
scope:OnlineMeetings.ReadWrite
grant_type:authorization_code
redirect_uri:https://jwt.ms
code:code

Decode the access token using jwt.ms and check whether the scope is OnlineMeetings.ReadWrite :

I am able to create the Online meetings successfully by using the below query:

https://graph.microsoft.com/v1.0/me/onlineMeetings
Content-Type: application/json

{
"startDateTime":"2023-01-12T14:30:34.2444915-07:00",
"endDateTime":"2023-02-12T15:00:34.2464912-07:00",
"subject":"User Token Meeting"
}