Can we use client credentials flow on regular Azure users?

fhcat

We would like to use Azure client credentials flow to do authentication for our service accounts. The thing is our service accounts are just regular users in Azure AD. They are not registered apps. The way our company sets up Azure makes it very heavy to register apps, so we would like to avoid it. So the question is, can we use client credentials flow for regular users in Azure? We need this as in our CI/CD we cannot popup a browser and let users do device-based authentication. We need the user to be able to authenticate in an automated way.

Simpal Kumar

You can't use client credentials flow where an Azure AD user is involved in the authentication flow.

Micrsofot Documentation - client credentials flow

This type of grant is commonly used for server-to-server interactions that must run in the background, without immediate interaction with a user.

But you can use one of the following supported authentication flow where a user is involved;

  1. Micrsofot Documentation - authorization code flow
  2. Micrsofot Documentation - implicit grant flow
  3. Micrsofot Documentation - device authorization grant flow

Device authorization grant flow might work in your case?

Collected from the Internet

Please contact [email protected] to delete if infringement.

edited at
0

Comments

0 comments
Login to comment

Related

Client Credentials Flow for Azure DevOps

Can Azure AD OAuth client credentials flow permissions be limited to specific mailboxes?

Slack WebApi, Bot users vs. client credentials flow?

Azure AD OAuth Client credentials flow access control

Postman Client Credentials Flow with Azure AD protected ressource

Securing .NET Framework Web API with Azure AD (Client credentials flow)

Adding Applications programmatically in Azure AD using Client Credentials Flow

Azure AD OAuth token wrong audience (client credentials flow)

Keycloak Client Credentials Flow Clarification

Should I use a single set of client_id/client_secret for my client credentials flow?

Graph Client with Client Credentials Flow No Photo data

Should non-confidential client applications be allowed to use the OAuth 2.0 Client Credentials flow?

OAuth2 - Can a trusted Client access User resources with Client Credentials flow

How can we create a User Flow in Azure-ad-b2c for ROPC authentication and then how can we use it in postman or in laravel controller

Can I generate Azure AD Client Credentials Secrets using an API?

Azure Client credentials provider throws error '/me request is only valid with delegated authentication flow'

Call Microsoft Graph API Using Azure AD 1.0 Endpoint Client Credentials Flow

How can you use LINQ to find Azure AD users with specific licenses using the Azure AD Graph API Client Library 2.0

Can we sync Azure AD users to our On-Premise AD

Can we get all Azure AD users list using PoweApps?

IdentityServer4: Can I use PKCE with Client Credentials in IdentityServer?

Can we use PostgREST API with Azure

Can you upload objects to an s3 bucket using only cognito client credentials flow?

Can .net core app have some APIs with client credentials flow and others with Open ID connect

Understanding OAuth2 Client credentials flow

Client Credentials flow: Problem understanding the whole setup

Refreshing an Access Token for Client Credentials Flow

Microsoft Graph API - Client Credentials Grant Flow

Spring security oauth 2 and client credentials flow