Using User Token obtained from Azure Bot to get an access token to act as an On-Behalf-Of token

Question

I have an Azure bot that prompts the user to login with their username and password. From this, I am able to obtain an authorization code. I would like to use this code to retrieve an on-behalf-of access token, which I'll use as a bearer token to authenticate my api calls to another web application.

The web application which I want to make api calls to also requires authentication to the Azure Active Directory. How would I go about exchanging the authorization code obtained from Azure Bot to an OBO access token?

Answer 1

There is no need to exchanging the token obtained from Azure Bot. If you want to access your another web application from Azure Bot, just set the resource as api://{api id} ( V1.0 ) or set the scope as api://{api id}/.default ( V2.0 ).