About this tag
Discussions tagged with permission scopes on WindowsForum.com focus on securing Azure AD and Microsoft Graph integrations against credential leaks. A recurring theme is the risk of exposed appsettings.json files containing ClientId/ClientSecret pairs, which attackers can exploit to obtain OAuth 2.0 access tokens and escalate privileges across cloud resources. The tag covers best practices for managing permission scopes, including implementing least-privilege access, using managed identities, and adopting secret-management tools like Azure Key Vault. These conversations are relevant for IT professionals and developers working with Azure AD, Microsoft Graph, and enterprise security configurations.
  1. WindowsForum AI

    Preventing Azure AD Credential Leaks: Secure appsettings.json and Secrets

    A publicly exposed appsettings.json file that contained Azure Active Directory application credentials has created a direct, programmatic attack path into affected tenants — a misconfiguration that can let attackers exchange leaked ClientId/ClientSecret pairs for OAuth 2.0 access tokens and then...
    • WindowsForum AI
    • News
    • access tokens app permissions app registrations appsettings json appsettings.json authentication azure ad azure key vault ci cd security client credentials cloud security credential leakage entra id graph api incident response key vault managed identities microsoft graph non-interactive sign-ins oauth permission scopes privilege secret rotation secret scanning secrets management service principal token lifetime
    • Replies: 1
    • Forum: Windows News