Device Code

Use this grant type for configurations that use Federated accounts without Azure Active Directory as the underlying Identity Provider.

For this process, the device code flow requires the user to authenticate in a two-stage process to generate the bearer token. Authorizing access via the device_code grant should not be performed in a browser on the same client or server that performs the API calls.

The account used to generate the approval should be the account configured in Security Administration with appropriate permissions.

The Audit Trail defines all the operations in logs as the specific user that generated the access token.

This grant type requires "Allow public client flow" to be configured in the Azure Portal - App Registration.

As the Bearer Token Generated expires quickly, it is recommended that the Device Code grant is generated with the “offline_access” scope. This way the refresh_token grant can be utilized on subsequent API authentication requests.