Microsoft (Client Credentials)

​

Overview

​

Pre-built tooling

​

Pre-built integrations

No pre-built integration yet (time to contribute: <48h)

​

Access requirements

​

Setup guide

No setup guide yet.

​

Useful links

• OAuth related docs
• How to register an Application
• How to configure permissions
• Overview of Microsoft Graph API

​

API gotchas

• Microsoft has a unified OAuth system for their various APIs. This provider should work for most of them (e.g. Microsoft EntraID, OneNote, Onedrive, Outlook, Sharepoint Online, Microsoft Teams etc.).
• Microsoft offers a tool that allows you to construct and perform Graph API queries and see their response for any apps on which you have an admin, developer, or tester role. For more information you can check Microsoft Graph Explorer.
• Please be aware that the Microsoft Graph API implements throttling to manage the volume of requests. For more information on handling throttling, refer to the Microsoft Graph Throttling Guidance.
• If you are developing an app for users within your own organization and the app has already been granted adequate permissions at the organization level with user consent turned off, you must override the integration config when calling the create connect session method:
  • Override authorization_params by setting only scope: '.default' and "prompt": "" to remove the consent screen. Note that if consent is required it will prompt the user for consent due to the “.default” scope.
  • Override authorization_params by setting only scope: '.default offline_access' and "prompt": "" to remove the consent screen. Note that if consent is required it will prompt the user for consent due to the “.default” scope.
  • Set the .default scope documentation to ensure the permissions remain the same as those granted at the organization level.

const { data } = await nango.createConnectSession({
  [...],
  integrations_config_defaults: {
    "microsoft-oauth2-cc": {
      authorization_params: {
        scope: '.default offline_access',
        "prompt": ""
      }
    }
  }
});

If this is not done, the app will show a consent screen prompting the user to grant permissions which the user will be unable to do without admin access.