Supported Authentication Methods Matrix¶
The following table shows the supported authentication methods for each type of service.
Windows Environments¶
| Microsoft Service | Interactive browser authentication | Device code authentication | SPA (Client Secret) | SPA (Certificate Secret) | ROPC |
|---|---|---|---|---|---|
| Microsoft Entra ID Portal | ✔️ | ✔️ | ❌️1 | ❌️1 | ✔️ |
| Entra ID GraphV2 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Azure services | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Exchange Online | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Microsoft 365 backend API | ✔️ | ✔️ | ❌️2 | ❌️2 | ✔️ |
| Purview | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Microsoft Teams | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| SharePoint Online | ✔️ | ✔️ | ❌️3 | ✔️ | ✔️ |
| Microsoft Fabric | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
NIX Environments (.NET Core)¶
| Microsoft Service | Interactive browser authentication | Device code authentication | SPA (Client Secret) | SPA (Certificate Secret) | ROPC |
|---|---|---|---|---|---|
| Microsoft Entra ID Portal | ✔️ | ✔️ | ❌️1 | ❌️1 | ✔️ |
| Entra ID GraphV2 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Azure services | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Exchange Online | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Microsoft 365 backend API | ✔️ | ✔️ | ❌️2 | ❌️2 | ✔️ |
| Purview | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| Microsoft Teams | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
| SharePoint Online | ❌️4 | ✔️ | ❌️3 | ✔️ | ❌️4 |
| Microsoft Fabric | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
-
Service Principal authentication is not supported in backend Entra ID APIs (ADIbizaUX) ↩↩↩↩
-
Service Principal authentication is not supported in Microsoft 365 backend APIs ↩↩↩↩
-
Authentication with client secret is not supported in SharePoint Online. You can find more information here and here ↩↩
-
SharePoint Online Management Shell Client Id is not supporting interactive authentication in .NET core. You can find more information here ↩↩