OAuth2 (Microsoft EntraID / OAuth Client Credentials Flow)

Integrating M365 shared inboxes, writing and reading files from OneDrive or SharePoint with generic users, sending Teams Messages as a Bot, using the Microsoft Graph API in workflows, … – All those use cases require not the user’s token retrieved on Application login, but a token generated for a generic user. Use the ‘OAuth2 (Microsoft EntraID / OAuth client credentials Flow)’ Login Method to configure the required params and simply add it to your endpoints of your Connectors to Microsoft’s services.

Find implementation examples for the Microsoft EntraID OAuth 2.0 Client Credentials Flow in the Microsoft Documentation

Preparation – Setup EntraID

Step 1 – Register Application

Step 2 – Create a secret

Step 3 – Add the API Permissions (e.g. for the Graph API)

Add API permissions in Microsoft EntraID

Please use Application Permissions instead of Delegated Permissions

Create a new Login Method

Create a new Login Method and select the type ‘OAuth2 (Microsoft EntraID / OAuth client credentials Flow)’

Set Login Method Type for Microsoft EntraID OAuth 2.0 Client Credentials Flow

Configure the details

Configure the required details based on your EntraID configuration

Detail	Description
Scopes	Add the required scopes that are neccessary for your Connector Calls
TenantID	ID of your Microsoft EntraID tenant
ClientID	Microsoft EntraID client ID
Client Secret	Microsoft EntraID client secret

Microsoft allows only one scope. E.g., for the Graph API, you should use ‘https://graph.microsoft.com/.default’. By default, the scope of Office 365 is added.