Concept
OAuth 2.0 is an authorization standard in which an app obtains a short-lived access token (bearer token) that stands in for the signed-in user when calling an API, instead of sending a password or a long-lived API key.
| Type | Concept |
|---|
2026-10-28 · Video on YouTube
Every time you click Sign in with Microsoft, OAuth 2.0 keeps your password out of the app. This episode explains the four players, the flows, tokens and scopes, and how it all works in Microsoft Entra ID and Microsoft Graph, for anyone who approves permission…
2026-10-28 · Video on YouTube
You've used OpenID Connect more times this week than you realize, and you never knew its name. It answers one simple question every app has to ask, and that question is who is this person. In this episode of Simply Explained you will learn: - The sign-in you…
2025-08-05 · Video on YouTube
Microsoft 365 looks like apps—Outlook, Teams, SharePoint. The real power is the Microsoft Graph API: one gateway to automate onboarding, sync calendars, govern groups, and ship dashboards the admin centers can’t. In this episode, I show you how Graph actually…
2026-07-15 · Video on YouTube
Dynamics 365 ERP MCP Server brings artificial intelligence directly into enterprise resource planning by allowing AI agents to securely understand, access, and execute business processes through the open Model Context Protocol (MCP). In this episode of…
2025-08-05 · Video on YouTube
Power Apps doesn’t have a connector for your mission-critical system? Build your own. In this episode, I show you—step by step—how to create a secure custom connector that speaks any API’s language (even the “fun” ones with OAuth quirks), so your apps can…
OAuth stands for open authorization. It is the standard that lets one app reach your data inside another app without ever holding your password. · From the episode: OAuth 2.0 - Simply Explained
OAuth 2.0 lets one app reach your data without your password, but it was not built to tell an app who you are. OpenID Connect adds the identity layer on top, answering who this person is. · From the episode: OpenID Connect - Simply Explained
The ID token is the token that holds the proof of who signed in. It answers the question every app has to ask, which is who this person is. The episode looks at what is inside it and why OAuth 2.0 alone was not enough for sign-in. · From the episode: OpenID Connect - Simply Explained
It uses OAuth 2.0 with scopes and tokens, and you choose between delegated and application permissions. Request only the scopes you need and prefer delegated where appropriate to avoid admin-consent trouble. · From the episode: Automate Microsoft 365 with Microsoft Graph API
The show notes mention security measures such as OAuth 2.0 for safe interactions between AI systems and enterprise tools. · From the episode: Dynamics 365 ERP MCP Server - Simply Explained
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Nobody has listed this topic yet. Add it to your profile.
Maintained by Mirko Peters (Microsoft MVP) · Last updated:
EN
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語
한국어