Get an Graph Authentication Token with PowerShell – No Modules Needed/HTTP-Only (Certificate-Based)

Most Important – Why Should You Avoid Client Secrets? Nowadays, it is recommended to avoid using client secrets and instead opt for certificate-based authentication. Client secrets pose a security risk as they are often stored in scripts or environment variables and can be compromised. Certificate-based authentication is more secure as it relies on asymmetric encryption,… Continue reading

Microsoft Graph API: Delegated vs. Application Permissions – The Key to Proper Access Control

Microsoft Graph API is the gateway to data and services in Microsoft 365, but access must be carefully managed. This is where “Delegated Permissions” and “Application Permissions” come into play. Both determine how an app interacts with Microsoft Graph, but they serve different purposes and have distinct security implications. In this blog post, you’ll not… Continue reading