Forum Discussion
custom tab-app authentication
Yes single sign on uses the account with which you have signed in to teams. You cannot have a user use a different account to sign in to a tab that uses SSO. If you want to allow users to sign in to a tab using other account (other than the once signed in to teams) you will need to implement Simple Authentication
- testuser7Sep 25, 2020Brass Contributor
Thanks Varaprasad-MSFT for your clarification. Appreciate your perfect answer.
As a follow up I have one point to clarify between 2 types of custom-tabs i.e., static tab and configuration tab-authentication .
As long as we are talking about the static-tabs I am totally onboard with the diagram at https://docs.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/auth-flow-tab
My understanding is the same diagram flow can be triggered and accomplished by the "configurable tab"
So, if I put it hands-on way,let's say there are 3 members on one channel where this configurable tab-app is installed.
All 3 members will go through this authentication-flow, consent all the scopes required by the tab on their MS-teams client.
Now, this tab will have OAuth token for all 3 members.
So if the job of this tab-app was to show the latest 5 emails then would the output-UI on the tab screen would be different for all the 3 members ??
That is not matching with my understanding because as far as I know, the "configurable tab" should provide information that is common and helpful to an entire team.
There is no member specific information. So what was the use of delegated-OAuth token ?Should not configurable tab be dealing with only Client-credential authentication flow and get the app-level token using its own client-id/client-secret ?
If it was static-tab, I would totally understand the importance of sign-in.
Appreciate your help.
Thanks.
- Varaprasad-MSFTSep 30, 2020Former EmployeeChannel tabs will have same behavior for all the users in channel .When you add a tab as channel tab it will be common to all members.
We should add such tabs as channel tabs.- testuser7Oct 02, 2020Brass Contributor
I totally agree with you that channel tab is common for all members.
And that's why I do not understand, why would channel tab want the delegate OAuth Token of the user ?
Shouldn't they focus only app-level token.
Thanks.