OAuth 2.0 device authorization grant - Microsoft identity platform
Jan 4, 2025 · The Microsoft identity platform supports the device authorization grant, which allows users to sign in to input-constrained devices such as a smart TV, IoT device, or a printer. To enable this …
Locking Down Device Code Flow: How (and Why) to Block It With …
Jun 26, 2025 · When Microsoft first introduced device code flow, it offered developers a clever way to sign in on devices with limited input options—think smart TVs and IoT hardware with no browser.
Blocking Device Code Flow in Microsoft Entra ID
Apr 15, 2025 · Device code flow is an authentication mechanism typically used on devices with limited input capabilities—like smart TVs, IoT appliances, or CLI-based tools. A user initiates login on the …
OAuth Device Code Phishing: Exploiting Microsoft’s Authentication Flow
Mar 12, 2026 · Discover how cybercriminals are exploiting Microsoft's OAuth Device Code flow in phishing attacks to bypass multi-factor authentication. Learn how to detect and prevent these …
Device Authorization Flow - Auth0 Docs
To do this, device apps use the Device Authorization Flow (ratified in OAuth 2.0), in which they pass along their Client ID to initiate the authorization process and get a token.
Device Code Phishing: How To Detect And Stop An Attack
Apr 8, 2026 · Device Code Flow was designed to make authentication easier Device Code Flow is a legitimate authentication method designed for devices that are difficult to type on.
Authentication flows as a condition in Conditional Access policy ...
Mar 24, 2026 · Device code flow lets you sign into devices that lack local input devices, like shared devices or digital signage. Device code flow is a high-risk authentication method that can be part of a …
Block Device Code Authentication Requests with a CA Policy
May 13, 2024 · The device code authentication flow is defined in RFC8628. It exists in Entra ID to support devices that don’t have the ability to sign into Entra ID in a more orthodox manner, like a TV …
Setting up Authentication flows using Device code flow in Entra ID
Apr 9, 2025 · 🔐 What is Device Code Flow? It’s used for signing in on devices with limited input capabilities — such as shared kiosks, digital signage, or Android-based conference room systems.
Configure Device Authorization Grant Flow - Okta Developer
Configure Device Authorization Grant Flow This guide describes the Device Authorization feature, which allows users to sign in to input-constrained devices and devices without a browser.