<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>OAuth 2.0 – M365.FM</title><link>https://www.m365.fm/entity/oauth-2-0/</link><description>An open authorization standard that decides what an app can reach on a user's behalf using scoped access tokens; it is not a login system on its own, which is why OpenID Connect adds sign-in on top.</description><language>en</language><item><title>SAML vs OpenID Connect: Choosing the Right Protocol for Microsoft Entra ID</title><link>https://www.m365.fm/community/u/mirko-p/blog/saml-vs-openid-connect-microsoft-entra-id/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/saml-vs-openid-connect-microsoft-entra-id/</guid><pubDate>Fri, 30 Oct 2026 06:02:07 -0000</pubDate><category>article</category><description>Compare SAML and OpenID Connect (OIDC) protocols in Microsoft Entra ID. Learn the key technical differences, use cases, and when to choose each standard.</description></item><item><title>ID Token vs Access Token: The Crucial OpenID Connect Difference</title><link>https://www.m365.fm/community/u/mirko-p/blog/id-token-vs-access-token-openid-connect/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/id-token-vs-access-token-openid-connect/</guid><pubDate>Wed, 28 Oct 2026 15:11:01 -0000</pubDate><category>article</category><description>Discover the critical differences between ID tokens and access tokens in OpenID Connect, and learn why mixing them up creates severe security flaws.</description></item><item><title>OAuth 2.0 - Simply Explained</title><link>https://www.m365.fm/show/episodes/oauth-2-0-simply-explained/</link><guid>https://www.m365.fm/show/episodes/oauth-2-0-simply-explained/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 -0000</pubDate><category>episode</category><description>Every time you click Sign in with Microsoft, OAuth 2.0 keeps your password out of the app. This episode explains the four players, the flows, tokens and scopes, and how it all works in Microsoft Entra ID and Microsoft Graph, for anyone who approves permission…</description></item><item><title>OpenID Connect - Simply Explained</title><link>https://www.m365.fm/show/episodes/openid-connect-simply-explained/</link><guid>https://www.m365.fm/show/episodes/openid-connect-simply-explained/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 -0000</pubDate><category>episode</category><description>You've used OpenID Connect more times this week than you realize, and you never knew its name. It answers one simple question every app has to ask, and that question is who is this person. In this episode of Simply Explained you will learn: - The sign-in you…</description></item><item><title>Demystifying OAuth 2.0 in Microsoft Graph: Delegated vs. Application Permissions</title><link>https://www.m365.fm/community/u/mirko-p/blog/demystifying-oauth-20-in-microsoft-graph-delegated-vs-application-permissions/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/demystifying-oauth-20-in-microsoft-graph-delegated-vs-application-permissions/</guid><pubDate>Tue, 11 Aug 2026 14:00:51 -0000</pubDate><category>article</category><description>Welcome back to the blog! If you have been diving deep into Microsoft 365 automation, you have likely run into the walls built by native connectors and traditional …</description></item><item><title>Azure API Management - Simply Explained</title><link>https://www.m365.fm/show/episodes/azure-api-management-simply-explained/</link><guid>https://www.m365.fm/show/episodes/azure-api-management-simply-explained/</guid><pubDate>Thu, 16 Jul 2026 00:00:00 -0000</pubDate><category>episode</category><description>Azure API Management (APIM) is one of the most important services in Microsoft Azure for organizations building modern cloud applications, microservices, and enterprise integrations. As the number of APIs grows, managing security, authentication, monitoring…</description></item><item><title>Dynamics 365 ERP MCP Server - Simply Explained</title><link>https://www.m365.fm/show/episodes/dynamics-365-erp-mcp-server-simply-explained/</link><guid>https://www.m365.fm/show/episodes/dynamics-365-erp-mcp-server-simply-explained/</guid><pubDate>Wed, 15 Jul 2026 00:00:00 -0000</pubDate><category>episode</category><description>Dynamics 365 ERP MCP Server brings artificial intelligence directly into enterprise resource planning by allowing AI agents to securely understand, access, and execute business processes through the open Model Context Protocol (MCP). In this episode of…</description></item><item><title>Private RAG Security: Authorization-Aware Data Retrieval</title><link>https://www.m365.fm/show/episodes/private-rag-isnt-enough-the-missing-layer-between-data-sovereignty-and-data-security/</link><guid>https://www.m365.fm/show/episodes/private-rag-isnt-enough-the-missing-layer-between-data-sovereignty-and-data-security/</guid><pubDate>Sat, 20 Jun 2026 00:00:00 -0000</pubDate><category>episode</category><description>veryone is talking about Private RAG, sovereign AI, regional hosting, and keeping enterprise data inside controlled environments. But in this episode of M365 FM, Mirko Peters explores a critical security gap that many organizations overlook: data sovereignty…</description></item><item><title>How to Run Local Llama on SharePoint Files Securely</title><link>https://www.m365.fm/show/episodes/stop-leaking-data-how-to-run-local-llama-on-your-sharepoint-files/</link><guid>https://www.m365.fm/show/episodes/stop-leaking-data-how-to-run-local-llama-on-your-sharepoint-files/</guid><pubDate>Thu, 18 Jun 2026 00:00:00 -0000</pubDate><category>episode</category><description>Artificial Intelligence is transforming the way organizations manage knowledge, documents, and collaboration. Yet as companies rush to adopt AI assistants and large language models, one question continues to dominate every conversation: how can you benefit…</description></item><item><title>How to Manage User Accounts with the Microsoft Exchange Online Admin API</title><link>https://www.m365.fm/community/u/mirko-p/blog/how-to-manage-user-accounts-with-the-microsoft-exchange-online-admin-api/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/how-to-manage-user-accounts-with-the-microsoft-exchange-online-admin-api/</guid><pubDate>Mon, 09 Mar 2026 08:50:16 -0000</pubDate><category>article</category><description>Explore the Exchange Online Admin API, a REST-based alternative to Exchange Web Services (EWS). Manage Exchange Online user accounts effectively.</description></item><item><title>Microsoft Teams Governance with Entra ID as the Control Plane</title><link>https://www.m365.fm/show/episodes/teams-admin-center-governance/</link><guid>https://www.m365.fm/show/episodes/teams-admin-center-governance/</guid><pubDate>Fri, 23 Jan 2026 00:00:00 -0000</pubDate><category>episode</category><description>In this episode, we dismantle a common Microsoft Teams governance myth: that the Teams Admin Center is the central command for controlling Teams behavior and enforcing governance. Most organizations treat the Admin Center like a control tower — but it’s…</description></item><item><title>Detect Impossible Travel and Token Replay in Microsoft Entra ID</title><link>https://www.m365.fm/show/episodes/microsoft-cloud-forensics-investigation/</link><guid>https://www.m365.fm/show/episodes/microsoft-cloud-forensics-investigation/</guid><pubDate>Fri, 19 Dec 2025 00:00:00 -0000</pubDate><category>episode</category><description>This episode plays out like a cybercrime thriller, exposing how today’s most dangerous breaches don’t smash doors—they’re invited inside. The investigation opens with a single click on January 12th. A polished phishing email doesn’t steal a password; it…</description></item><item><title>Fix Broken SPFx Live Data Updates</title><link>https://www.m365.fm/show/episodes/live-data-in-spfx-why-yours-isnt-moving/</link><guid>https://www.m365.fm/show/episodes/live-data-in-spfx-why-yours-isnt-moving/</guid><pubDate>Mon, 03 Nov 2025 00:00:00 -0000</pubDate><category>episode</category><description>Real-time data is becoming essential in modern workplaces, and SharePoint is no exception. In this episode, we explore how developers can unlock powerful real-time experiences in SharePoint Online using SPFx web parts connected to dynamic APIs. You’ll learn…</description></item><item><title>Automate Microsoft 365 with Microsoft Graph API</title><link>https://www.m365.fm/show/episodes/microsoft-graph-api-the-secret-control-panel/</link><guid>https://www.m365.fm/show/episodes/microsoft-graph-api-the-secret-control-panel/</guid><pubDate>Tue, 05 Aug 2025 00:00:00 -0000</pubDate><category>episode</category><description>Microsoft 365 looks like apps—Outlook, Teams, SharePoint. The real power is the Microsoft Graph API: one gateway to automate onboarding, sync calendars, govern groups, and ship dashboards the admin centers can’t. In this episode, I show you how Graph actually…</description></item><item><title>Build Secure Custom Connectors for Power Apps</title><link>https://www.m365.fm/show/episodes/your-power-apps-only-do-half-the-job-heres-why/</link><guid>https://www.m365.fm/show/episodes/your-power-apps-only-do-half-the-job-heres-why/</guid><pubDate>Tue, 05 Aug 2025 00:00:00 -0000</pubDate><category>episode</category><description>Power Apps doesn’t have a connector for your mission-critical system? Build your own. In this episode, I show you—step by step—how to create a secure custom connector that speaks any API’s language (even the “fun” ones with OAuth quirks), so your apps can…</description></item></channel></rss>