I want to use GraphAPI in ROPC including redirect authentication of ADFS.

Question

I want to use GraphAPI in ROPC including redirect authentication of ADFS.
I have to use graphapi in the ROPC method, but perhaps because of ADFS authentication, the following error occurs when obtaining an access token.
-------------‐-------
Error validating credentials due to invalid username or password.

---

Probably because there is federated authentication, but the authentication screen uses the same UPN and PASSWORD.
How can I use access tokens?

The development environment is Node.js

I am very troubled, so I would be happy if you could tell me if there is a detailed person.

Answer 1

Hi @大坂 翔 • Thank you for reaching out.

In case of ROPC flow, the credentials are directly checked against Azure AD and redirection to ADFS doesn't happen. However, you can use Azure policy to configure specific application(s) to do the password validation on the cloud without removing the federation. For this purpose, you can follow the steps I have provided in my blog post: ROPC (Username/Password) flow fails with AADSTS50126: Invalid username or password for federated users

If you don't want to enable Password Hash Sync for all users in the tenant, you may consider Selective password hash synchronization configuration for Azure AD Connect.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.