Graph API silent login auth with MFA enabled cause Bad requested

Question

Hi,

My project has an autoprocessing console that would use Graph silent login to get auth token. Since the company starts to enable the MFA, it would cause the auth silent login call to get 400 - Bad Requested.

https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token

Like to hear some may have the same challenge and how to deal with it?

Answer 1

Use the client credentials flow, if possible: https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow
If not possible, use the Device auth or ROPC.