Microsoft Security | Microsoft Graph
An API that connects multiple Microsoft services, enabling data access and automation across platforms
Azure API Certicate
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 1%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMJ%3C/text%3E%3C/svg%3E)
Milot, Jonathan
1
Reputation point
Hello,
We have an integration with SAP's LMS with Teams via Azure API.
We wonder how security works, either by a Secret Client or a Certificate.
How does it work when it's with a Certificate, is it only uploaded on the Azure side only (JSON GET) or it has to be uploaded on the side of the app that's making the call too
Microsoft Security | Microsoft Graph
{count} votes
-
MayankBargali-MSFT 70,986 Reputation points Moderator2022-03-07T05:26:50.107+00:00 @Milot, Jonathan Can you please confirm if you are talking about graph API when you mentioned "Azure API". If not can you share more details/documents on what Azure API you are calling?
-
Milot, Jonathan 1 Reputation point
2022-03-07T20:47:52.737+00:00 Hello,
I'm no API expert, but I believe so.
**Look at this link with more details on what we need to achieve, specifically point #3 :
(also check capture.png attached) **https://blogs.sap.com/2022/01/30/successfactors-lms-microsoft-teams-vls-integration/
So just going back to my original question, I would just like to add that the people who deal with security in our company find it unsafe with the secret client, they have seen this on the web:
"Add a client secret
Sometimes called an application password, a client secret is a string value your app can use in place of a certificate to identity itself. Client secrets are considered less secure than certificate credentials."Is it true in our case scenario, Do we have to check the security certificate of Microsoft Teams on the side of the app that's making the call. (On the other hand, SAP- LMS does have a security certificate that we can add on Azure side..)
Thank you very much, i appreciate
-
Milot, Jonathan 1 Reputation point
2022-03-09T13:56:30.22+00:00 @MayankBargali-MSFT , did you have time to take a look of what i mentionned above?
Thank you for your support
-
MayankBargali-MSFT 70,986 Reputation points Moderator
2022-03-09T14:11:48.17+00:00 @Milot, Jonathan Apology for the delay. I have already updated the tag to
microsoft-graph-teamworkso the right can team assist you. I have followed up with them to assist you further.
Sign in to comment
Sign in to answer