Untangling Authorization Code, OBO, and Refresh Token Flows in Azure AD — A Technical Exploration
Dissecting OAuth 2.0 flows in multi-app Azure AD scenarios — what’s OBO, what’s not, and how to structure secure delegation.
Written by
Learning, building and Sharing - one challange at a time
Hi, I’m Fayaz Khan — a PLM Solution Architect with deep hands-on experience in 3DEXPERIENCE, real-world integrations, and enterprise system behavior. I work at the intersection of engineering, security, and systems thinking, navigating between PLM platforms, cloud infrastructure, APIs, and practical business needs. I prefer digging into why something works (or breaks), rather than just how to configure it. My writing is an attempt to document the often-overlooked details — the silent bugs, the edge cases, the security gaps — and sometimes, the mental models that help me make sense of it all.
Responses
Markdown supported · ⌘↵ to post
No responses yet.