Concept
An open authorization standard that decides what an app can reach on a user's behalf using scoped access tokens; it is not a login system on its own, which is why OpenID Connect adds sign-in on top.
| Type | Concept |
|---|---|
| Documentation | learn.microsoft.com/en-us/azure/active-directory/fundamentals/auth-oauth2 |
2026-01-23 · Video on YouTube
In this episode, we dismantle a common Microsoft Teams governance myth: that the Teams Admin Center is the central command for controlling Teams behavior and enforcing governance. Most organizations treat the Admin Center like a control tower — but it’s…
2026-07-16 · Video on YouTube
Azure API Management (APIM) is one of the most important services in Microsoft Azure for organizations building modern cloud applications, microservices, and enterprise integrations. As the number of APIs grows, managing security, authentication, monitoring…
2026-06-20 · Video on YouTube
veryone is talking about Private RAG, sovereign AI, regional hosting, and keeping enterprise data inside controlled environments. But in this episode of M365 FM, Mirko Peters explores a critical security gap that many organizations overlook: data sovereignty…
2026-06-18 · Video on YouTube
Artificial Intelligence is transforming the way organizations manage knowledge, documents, and collaboration. Yet as companies rush to adopt AI assistants and large language models, one question continues to dominate every conversation: how can you benefit…
2025-11-03 · Video on YouTube
Real-time data is becoming essential in modern workplaces, and SharePoint is no exception. In this episode, we explore how developers can unlock powerful real-time experiences in SharePoint Online using SPFx web parts connected to dynamic APIs. You’ll learn…
2025-12-19 · Video on YouTube
This episode plays out like a cybercrime thriller, exposing how today’s most dangerous breaches don’t smash doors—they’re invited inside. The investigation opens with a single click on January 12th. A polished phishing email doesn’t steal a password; it…
2026-10-28 · Video on YouTube
Every time you click Sign in with Microsoft, OAuth 2.0 keeps your password out of the app. This episode explains the four players, the flows, tokens and scopes, and how it all works in Microsoft Entra ID and Microsoft Graph, for anyone who approves permission…
2026-10-28 · Video on YouTube
You've used OpenID Connect more times this week than you realize, and you never knew its name. It answers one simple question every app has to ask, and that question is who is this person. In this episode of Simply Explained you will learn: - The sign-in you…
2025-08-05 · Video on YouTube
Microsoft 365 looks like apps—Outlook, Teams, SharePoint. The real power is the Microsoft Graph API: one gateway to automate onboarding, sync calendars, govern groups, and ship dashboards the admin centers can’t. In this episode, I show you how Graph actually…
2026-07-15 · Video on YouTube
Dynamics 365 ERP MCP Server brings artificial intelligence directly into enterprise resource planning by allowing AI agents to securely understand, access, and execute business processes through the open Model Context Protocol (MCP). In this episode of…
2025-08-05 · Video on YouTube
Power Apps doesn’t have a connector for your mission-critical system? Build your own. In this episode, I show you—step by step—how to create a secure custom connector that speaks any API’s language (even the “fun” ones with OAuth quirks), so your apps can…
OAuth stands for open authorization. It is the standard that lets one app reach your data inside another app without ever holding your password. · From the episode: OAuth 2.0 - Simply Explained
OAuth 2.0 lets one app reach your data without your password, but it was not built to tell an app who you are. OpenID Connect adds the identity layer on top, answering who this person is. · From the episode: OpenID Connect - Simply Explained
The ID token is the token that holds the proof of who signed in. It answers the question every app has to ask, which is who this person is. The episode looks at what is inside it and why OAuth 2.0 alone was not enough for sign-in. · From the episode: OpenID Connect - Simply Explained
It uses OAuth 2.0 with scopes and tokens, and you choose between delegated and application permissions. Request only the scopes you need and prefer delegated where appropriate to avoid admin-consent trouble. · From the episode: Automate Microsoft 365 with Microsoft Graph API
The show notes mention security measures such as OAuth 2.0 for safe interactions between AI systems and enterprise tools. · From the episode: Dynamics 365 ERP MCP Server - Simply Explained
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Nobody has listed this topic yet. Add it to your profile.
Maintained by Mirko Peters (Microsoft MVP) · Last updated:
EN
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語
한국어