Mixing delegated and application permissions (the on-behalf-of flow) - Microsoft identity platform

Kyle Marsh, Principle Program Manager in Microsoft Identity and Network Access, explains the dangers of mixing application permissions and delegated permissions, and how to use the on-behalf-of flow instead.
0:00 - Intro
0:26 - The problem with mixing application and delegated permissions
2:02 - How an API can call another API on behalf of a user
5:08 - Summary

Learn more:

► Follow us on social:

#Microsoft #MicrosoftSecurity