applications-auth

Route Microsoft Graph API user tasks to domain-specific resource documents.

22|2|Updated Nov 22, 2025
One-click install
npx skills add https://github.com/markpitt/claude-skills --skill applications-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: applications-auth
Source: https://github.com/markpitt/claude-skills/tree/main/skills/microsoft-graph
Command: npx skills add https://github.com/markpitt/claude-skills --skill applications-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This resource covers app registrations, service principals, OAuth2 permissions, and credentials management for Microsoft Graph in Azure AD.

Core Features & Use Cases

  • App registration, permissions, and redirect URIs
  • Service principals and role management
  • Exposing API permissions and token flows
  • Best practices for secure app registration

Quick Start

Create an app, configure redirect URIs, and assign Graph permissions to enable secure Graph access.

Frequently Asked Questions about applications-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I register an app and configure OAuth2 permissions for Microsoft Graph?

App registration for Microsoft Graph involves creating an application in Azure AD, configuring redirect URIs for your OAuth2 flow, and assigning the Graph API permissions your app needs. The Skill provides step-by-step guidance on permissions assignment and secure credential management to enable authenticated Graph access.

What's the difference between app-only and delegated permissions in Azure AD?

Delegated permissions allow apps to act on behalf of a signed-in user, while app-only permissions (service principals) let apps call Graph without user interaction. This Skill covers both token flows, helping you choose the right permission model based on your use case and security requirements.

How do I set up a service principal for unattended Graph API access?

Service principals enable apps to authenticate to Microsoft Graph without user involvement using client credentials. This Skill guides you through service principal creation, role assignment, and credential generation to automate secure, unattended Graph API calls.

What are best practices for managing credentials and permissions in Graph app registrations?

Secure app registration requires limiting permissions to only what's needed, rotating credentials regularly, and auditing access. This Skill outlines credential management best practices and permission scoping strategies to reduce exposure across Applications & Auth, Identity & Access, and Security & Governance domains.

Can I use the same app registration across multiple Graph API domains?

Yes. A single app registration can request permissions across multiple Microsoft Graph domains—Mail & Calendar, Files & Storage, Teams & Communications, Planning & Notes, and others. This Skill routes your task to the correct domain-specific resource based on which Graph APIs your app needs to call.