azure-ad-graph-api

问题 For one of my dashboards I want to show the user their profile picture for obvious personalisation reasons, and offer them the possibility to change it. Most blog posts and articles on the Microsoft Docs site name a variety of endpoints I can leverage to get this data, but I'm just unable to get this to work with a simple postman call. Since I can't even get the photo, I wouldn't know how to change (update) it either. The following endpoints don't work: GET https://graph.microsoft.com/beta

问题 First, I'm using Spring, Jetty, Retrofit. When I use calendarView in local, they return the successful values successfully. But, When others connect to my local server and call this api, it always returns me 403-AccessDenied error. (additionally, When they call another ms api, they return the successful values.) I think I have set all the recommended permissions in Graph api. But this could be my illusion. In order for someone else to call api from my local server, what should I do? Or Am I

问题 I am adding oAuth authentication support to daemon application. In case of IMAP, application logs on to every mailbox by specifying userID/password. Office365 oAuth access requires application registration and uses Clients Credential Grant flow. In this case, application authenticates with Azure AD once and accesses every mailbox using oAuth token. This authentication flow requires significant changes of existing code base. I would like to access mailbox in logically same way as IMAP (specify

问题 I'm creating a web service that contains authentication (no identity), and I protected the APIS with JWT (the token is returned when the user logs in or registers by email, password, name, etc..) but I also have a microsoft login/register using MSAL, I also created an Azure App. How do I validate the login with microsoft to return the JWT or how could I implement the API authorization using both JWT and Azure AD. 回答1: You have currently registered an Azure application, you can set it as a

问题 I am adding oAuth authentication support to daemon application. In case of IMAP, application logs on to every mailbox by specifying userID/password. Office365 oAuth access requires application registration and uses Clients Credential Grant flow. In this case, application authenticates with Azure AD once and accesses every mailbox using oAuth token. This authentication flow requires significant changes of existing code base. I would like to access mailbox in logically same way as IMAP (specify

问题 Currently, I am registering app(s) in azure AD using application permissions. I am trying to find out if there is any better option to do that? Current Approach:- Registered one app in azure AD using azure portal with "Application.ReadWrite.OwnedBy" application permission(with admin consent). Using that app registering other app(s) as follows ClientCredentialProvider authProvider = new ClientCredentialProvider(confidentialClientApplication); GraphServiceClient graphClient = new

问题 I am trying to start a scheduled proactive conversation (the bot initiates the conversation on scheduled time). I managed to get the User's AAD ID based on Graph API, but it doesn't match the Teams user ID. Tried for over 2 hours to obtain the right id, but I can't figure it out how. What would be the best approach I should take? 回答1: I'm curious how you tried to "match" these? In any case, I don't think they're intended to match up in any way (the aadObjectId Guid and the "29:..." user id).

问题 Issue with adding Member to group in Azure AD, getting this error message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration I am trying to add existing member of azure AD to a existing group,But I am getting response as "Bad Request". For some of the calls updateasync worked fine but member not added to group. I have provided my code that I am trying with the error I am getting below.Kindly suggest if any one

问题 I need to use the Microsoft Graph API to get free/busy schedules from the calendar with a .NET Core Windows service. According to Microsoft's own documentation I should use the following: GraphServiceClient graphClient = new GraphServiceClient( authProvider ); var schedules = new List<String>() { "adelev@contoso.onmicrosoft.com", "meganb@contoso.onmicrosoft.com" }; var startTime = new DateTimeTimeZone { DateTime = "2019-03-15T09:00:00", TimeZone = "Pacific Standard Time" }; var endTime = new

问题 I'm testing some things out using the Windows Graph API, connecting to an Azure AD. So far, I am able to pull the User information for a given user object id. This is great, as it shows the Department and that is what I'm wanting to find. However, it there a call I can make that will list out ALL Departments currently in the AD? I need to pull all of them so I can see what is defined, and add logic to my program to allow certain departments access to certain areas. Thank you! 回答1: You once