Identity applications with Implicit flows enabled

Question

I'm looking to clean up my Azure AD environment from outdated/unsecure apps which is still using OAuth2 Implicit flow, is there any built-in capabilities or "community" scripts to identify these apps?

Answer 1

Hello @Sergey S

You can use below PowerShell cmd to identify the apps which are using OAuth2 Implicit flow:

Pre-requisites:

• AzureAD Powershell Module
• Global Administrator or Application Administrator account credentials.

Run Connect-AzureAD and sign-in with Global Administrator or Application Administrator account.

Get-AzureADApplication | Where-Object {$_.Oauth2AllowImplicitFlow -eq "True"}

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.