Microsoft Graph API for Service Applications

Question

We are developing a web application using the “Microsoft Schedule” , where a user registered on the network can export all calendar events to a third-party calendar. Application. After this initial export, we need to save the exported data in synchronization with calendar changes through the service application (scheduled task, running on the server). This should be a multi-user application, as people from different organizations should be able to use this service.

Currently, we have authenticated using OAuth 2.0 and OpenID Connect, as described in this example . Later, we realized that the access token that we get using this method cannot be used in a service application without user interaction. Given our scenario, what's the best way to achieve this?

I read about the Application-Only Authorization Method . If we use this authentication method, the application must be approved by the tenant's administrator, and these applications are quite effective in terms of what data they can get in the Office 365 organization. Given that we are developing a product used by various organizations, can this method be used ?

Answer 1

In order to use the OAuth2.0 client credentials (aka "Application-only access" or access to the service account, depending on what documentation you are reading), the administrator for each lease will have to indicate which areas of your daemon process users may have in their rent. End users cannot transfer these rights to the code itself (as far as I know, at least).

, , , Graph API , Office 365, . , , Office 365. - , , , Microsoft.: -)