Relative Content

Tag Archive for azuremicrosoft-graph-api

MS Graph metered API with on-behalf-of auth flow

We are calling MS Graph API endpoints that require metered API to be enabled (e.g. assignSensitivityLabel). Microsoft.GraphServices/accounts resource for our app has been created according to documentation. Call is working fine when we use client credentials flow, but it returns 402 Payment Required error in case we use on-behalf-of flow.

Checking if an External user is a member of a group from their sign-in identity

I authenticate users of my desktop app via Entra. They are created as external members of an External Tenant, and they use their email and password as sign in method. In the app, I need to validate that they are members of certain groups I’ve created in the tenant. All I have at that point is the email address they used to sign in with. I don’t have their User Principal Name.