Azure @ Enterprise - ROPC Flow in Azure AD to Access SharePoint
This video talks about how to use the ROPC OAuth flow in Azure AD to access SharePoint.com.
Major points
The design in this video is not to get the password from clients. Instead, the service account password is always with the API application. It just avoids giving app registration access to SharePoint.com
Instead of keeping the service account password in app.config keep it in secure places such as Azure Key Vault.
Links
ROPC documentation https://docs.microsoft.com/en-us/azur...
ROPC Standard - https://tools.ietf.org/html/rfc6749#s...
PoC Source - https://github.com/joymon/azure-demos...
The library used in the Console PoC is EasyConsoleStd https://www.nuget.org/packages/EasyCo...
Chapters:
0:10 Theory about ROPC flow
2:05 Use case
4:30 Code walkthrough
8:01 Configurations