Forum Discussion

muditsaxena's avatar
muditsaxena
Copper Contributor
Dec 06, 2021

Teams App Authentication Workflow across multiple devices

  Hi,    We are developing an app for Teams meeting utilizing the shared meeting stage. As part of this app, we have our own authentication flow using OAuth (https://docs.microsoft.com/en-us/micro...
developer
devices
meetings
microsoft teams
muditsaxena's avatar
muditsaxena
Copper Contributor
Dec 07, 2021

We have our own OAuth flow, so are you suggesting we use SSO flow using AAD?

Second, if you look at already published apps like `Jira Cloud` on Teams, they also have their own OAuth flow despite that they are able to achieve the multi-device flow i.e sign-in once on one device and use on other devices. So, how is that achieved?

  • muditsaxena's avatar
    muditsaxena
    Copper Contributor
    Dec 08, 2021
    We are using Tab based auth flow
    https://docs.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/authentication/auth-flow-tab
      • muditsaxena's avatar
        muditsaxena
        Copper Contributor
        Dec 20, 2021

        ChetanSharma-msft The links you shared works well for using AAD as SSO/IDP provider while we use Okta as IDP 

         

        Let me explain in detail what I am trying to achieve here and my authentication flow. 

         

        Authentication flow 

        1. We use OKTA as our IDP. So, OKTA issues us access/refresh token
        2. Using the token above we can access our internal services API 

        Teams Authentication Flow (Currently implemented) 

         

        1. User installs app onto Mac App
        2. Gets a configuration page to login 
        3. We use https://docs.microsoft.com/en-us/microsoftteams/platform/concepts/authentication (https://docs.microsoft.com/en-us/microsoftteams/platform/concepts/authentication/authentication#web-based-authentication-flow) to redirect users to our Okta sign-in pop-up page 
        4. Post successful completion of this flow, we get access token and refresh token. 

         

        For the current user post the above installation flow, our app is installed on their other devices as well like iPad, mobile, etc. Now if a user wants to use our app on Mobile Teams Client for example, does he have to go through the same sign-in process again? Or Is there any other way to use the app on other devices without re-entering sign-in credentials?

         

Resources