Manage and revoke oAuth access to an outlook.com account

Question

Consider the following scenario.

You grant access to your outlook.com account from different devices that support oAuth (like Windows Phone) or oAuth enabled applications.

My questions:

• Where can I view and manage the list of devices and applications that have access to my outlook.com account using oAuth?
• How can I revoke access to my outlook.com account for one or more of these devices and applications from within my outlook.com account?

Things I have already tried:

• Check the 'Your devices' section in the outlook.com account. This section is empty as the outlook.com account has not been added as the primary account of the device, but as an additional email account.
• Change the password of the outlook.com account. => devices are still syncing as a password change does not seem to revoke existing tokens.
• Enable/disable two-step authentication => devices are still syncing as this does not seem to revoke existing tokens

Anyone knows how I can manage oAuth access to an outlook.com account?

Thank you!

Answer 1

Hi,

Thank you for posting the query on Microsoft Community. I am sorry to know that you are facing issues with Outlook.com

To guide you in the right direction, I need more information from you by answering the following questions:

• How are you trying to access **"**Your devices" in Outlook.com? Please mention the steps.
• As mentioned by you “Things I have already tried:”, is it through web or app?

Your reply is very important for us to ensure a proper resolution.

Meanwhile, I suggest you to try the steps provided below and check.

You can manage your Outlook.com account from many popular mail apps. Here's how:

Use EAS to sync to your email from your Windows Phone 8, Outlook 2013 desktop app, iPhone, or Android device. With EAS you can get your email immediately, as well as see all your folders, calendar and contacts in one place.

Please refer to the link below.

http://windows.microsoft.com/en-IN/windows/outlook/send-receive-from-app

Please get back to us with the above information to assist you accordingly.

Answer 2

How are you trying to access "****Your devices" inOutlook.com? Please mention the steps.

• I go to outlook.com and login to my account
• I go to "Account settings"
• From the top menu I select "Devices -> Your Devices"
• This page shows no devices. The same for the pages "Apps & games devices", "Music devices", "Movies & TV devices"

As mentioned by you “Things I have already tried:”, is it through web or app?

This is through the website.

About EAS and the link your provided.

I'm using the steps described on that link. But as far as I know, Windows Phone 8 uses OAuth, and not EAS for Outlook.com.

Answer 3

Hi,

This section is empty as the particular outlook.com account has not been added as the primary account of the device, but as an additional email account. In order to see the difference/changes in " Your devices", I suggest you to please make that particular Outlook.com account as the primary account and check.

Hope this helps in resolving the issue. If the issue persists, do get back to us. We will be happy to assist you.

Answer 4

Hi,

This section is empty as the particular outlook.com account has not been added as the primary account of the device, but as an additional email account. In order to see the difference/changes in " Your devices", I suggest you to please make that particular Outlook.com account as the primary account and check.

Hope this helps in resolving the issue. If the issue persists, do get back to us. We will be happy to assist you.

Hi, thank you for the suggestion. Unfortunately, this does not solve my problem, as this is exactly my problem...

I want to be able to revoke access to my account if the account is not the primary account of the device.

If I set it as the primary account, the problem is not resolved but shifted to the account that was previously set as the primary account.

I addition, this problem is not limited to Windows Phone, but it affects all apps that connect to outlook.com accounts using OAuth as described here: https://dev.outlook.com/RestGettingStarted.

If access cannot be revoked centrally from within the account, this seems like a big security issue to me. So I really hope this is possible.

Answer 5

I had the same problem - looked everywhere and could not find where to revoke OAuth tokens for connected apps. I finally found it today though.

1. Sign in to Outlook.com
2. Click your user icon at top right
3. Click "View Account". This takes you to an account overview page on account.microsoft.com
4. Click "Security & Privacy" on the menu bar
5. There is an "Apps & Services" section there. Click the "Manage permissions" link in this section.
6. You'll see a list of connected apps, you can click Edit to view/remove their access to your account