Forum Discussion
Application Accounts can only use the scope with value .default
and the scope necessary has to be set up via the application within the Azure Portal.
The User Accounts for all of the Microsoft snap packs need the scope
defined on the Token and Authentication endpoints, the Auth endpoint scope needs to match the scopes required to work with the apis required, you’ll need to use scope
on both the Auth Endpoint
and Token Endpoint
and it needs to be space-separated with all of the scopes required for the access you need (including offline_access
in order to get a refresh token). in this case, you might need offline_access, Chat.SendMessage
and a few others, so you’ll need to define them all. What you see in our docs under “Token Endpoint Configuration” as far as scope goes also applies to the “Auth Endpoint Config”.
https://docs-snaplogic.atlassian.net/wiki/spaces/SD/pages/1576271954/Teams+OAuth2+User+Account