Authentication, SSO, and Microsoft Graph in Microsoft Teams Tabs: An End-To-End Tutorial

Adrian -

I am working on a Teams tab application, using C# .net mvc and javascript. Your article is excellent, and fills in many gaps in the online documentation. However, https://github.com/OfficeDev/microsoft-teams-sample-complete-csharp  you referenced does not appear to be doing client side authentication. I cannot find a call to microsoftTeams.authentication.authenticate anywhere in the code.

I have been able to authenticate following https://blogs.msdn.microsoft.com/richard_dizeregas_blog/2017/02/08/microsoft-teams-and-oauth-in-custom-tab/ - I believe the flow is the same, but he is using the https://secure.aadcdn.microsoftonline-p.com/lib/1.0.13/js/adal.min.js

Problem - after authentication, I can access the Microsoft Graph API "https://graph.microsoft.com/v1.0/me", but the "https://graph.microsoft.com/beta/me/joinedTeams" returns an { "error": { "code": "", "message": "Authorization has been denied for this request.",

I have set Microsoft Graph Permissions in the Application Registration Portal for my app to same as I used in Graph Explorer.

I am in a developer sandbox, and have access to Office Admin. Is there something else I need to do to have permissions applied to my sideloaded app?

Here is a snapshot the app's permissions - any help would be appreciated!

Brad Cote