Understanding the OAuth2 redirect_uri and Azure AD Reply URL Parameters


When you register an Azure AD application, amongst other things you are required to configure a Reply URL, which by default takes its value from the Sign-On URL value you enter during the Azure application registration wizard. The explanation for the Reply URL parameter is in most cases a little vague… From Authentication Scenarios for AzureAD… Reply URL and Redirect … Continue reading Understanding the OAuth2 redirect_uri and Azure AD Reply URL Parameters

Grokking the AzureAD OAuth2 Implicit Grant Flow


References: Authentication Scenarios for AzureAD The OAuth2 Implicit Grant flow is designed for use by applications which cannot maintain the security of an application registration client secret, typically applications which run in a browser. Unlike the Authorization Code grant flow, the implicit grant flow returns to the client an access token upon successful authentication when the … Continue reading Grokking the AzureAD OAuth2 Implicit Grant Flow