MS Graph and Azure Active Directory

Question

Problem : How to authenticate in MS Graph using Azure AAD access token.

Current flow :

My web app has AAD configured with "Log in with AAD"

If I log into AAD my demo app is showing and if I go to https://******.azurewebsites.net/.auth/me then I get the access_token.

What I tried : So I tried a couple of things and this was the last, I copied the access_token as code and tried to send it, didn't work.

I'm searching for a solution to silently use the already logged-in user and call MS Graph.

Answer 1

For the already logged in user you need follow the below steps for access:

1. Make sure you have enable the allow access token for the register app as below

2. Write code to acquire access token for the for the logged in user Reference

3. Now you can pass this token in other successive call to get the result.

Answer 2

The reason for the error is that you have used the wrong code . Don't try to send the access token as a code, you should request an authorization code in your browser.

https://login.microsoftonline.com/{tenant id}/oauth2/v2.0/authorize?
client_id={client id}
&response_type=code
&redirect_uri={redirect_uri}
&response_mode=query
&scope=https://graph.microsoft.com/.default
&state=12345

In addition, redirect_uri is also a required parameter.