This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 17%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESL%3C/text%3E%3C/svg%3E)
I am trying to use OAuth to authenticate EWS API. The Azure app is setup for "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)". I was able to get a valid token by using the client and tenant IDs. The scope I am using is "https://outlook.office365.com/EWS.AccessAsUser.All". However, when trying the retrieve the root folder, I got the 401 error. I believe it's an permission issue. Can you tell me what did I do wrong?
Second part of the question. Our app currently has an Exchange 365 integration using EWS and basic auth. I understand basic auth is going away and I need to implement OAuth. Our app is still using .NET framework 4.5.1. Can I change my app to use OAuth without a major rewrite? Can you recommend documentation and/or code sample? Thank you
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 80%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
Hi ,
Welcome to the Microsoft Q&A platform!
According to your description, the issue is a development and scripting issue. To make problem solving more effective, we changed the label from” office-exchange-online-itpro” to "office-exchange-server-dev" for more professional help.
Thank you for your understanding!
Using the client credentials flow, which requires that you assign Application Permission and you only have Delegate permission, with EWS, the only Application permission that will work is full_access_as_app; see https://learn.microsoft.com/en-us/exchange/client-developer/exchange-web-services/how-to-authenticate-an-ews-application-by-using-oauth (app-only section)