Contents
How to see the setup of an OAuth connected app?
The Install button only shows up for us under Manage > Connected Apps oAuth Usage when the app was installed and then uninstalled. If it shows up for an already installed app, it might be a different app. The app identity is not based on the display name you see on the list of apps.
How does OAuth work in Azure DevOps Services?
Authenticate your web app users for REST API access, so your app doesn’t continue to ask for usernames and passwords. Azure DevOps Services uses the OAuth 2.0 protocol to authorize your app for a user and generate an access token. Use this token when you call the REST APIs from your app.
How to create policies to control OAuth apps?
The first way is under Investigate and the second is under Control. To create a new OAuth app policy: Under Investigate select OAuth app. Filter the apps according to your needs, for example, you can view all apps that request Permission to Modify calendars in your mailbox.
Why does OAuth detect apps with misleading names?
Scans OAuth apps connected to your environment and triggers an alert when an app with a misleading name is detected. Misleading names, such as foreign letters that resemble Latin letters, could indicate an attempt to disguise a malicious app as a known and trusted app.
How to control third-party cloud OAuth apps get permissions?
The number of users who authorized this app to access their app’s account, and granted the app permissions. Select the number to view more information, including a list of user emails and whether an admin has consented the app previously.
What can I do if my OAuth app is suspicious?
If the app is still suspicious, you can research the app name, publisher, and URL online. You can export the OAuth app audit for further analysis of the users who authorized an app. For more information, see OAuth app auditing.
How to export OAuth log in Microsoft Office?
To export the log, perform the following steps: On the OAuth apps page, on the row where the relevant app appears, under Authorized by, click the link showing the number of users that authorized the app. In the pop-up, click Export.