MicrosoftClientCertificateOAuth2TokenProvider

Description

Provides OAuth2 access tokens for the Microsoft Graph API using client_credentials with a client certificate.

Tags

access token, authorization, graph, http, microsoft, oauth2, provider

Properties

In the list below required Properties are shown with an asterisk (*). Other properties are considered optional. The table also indicates any default values, and whether a property supports the NiFi Expression Language.

Display NameAPI NameDefault ValueAllowable ValuesDescription
Client ID *Client IDThe Client ID for the Microsoft Graph API
Refresh Window *Refresh Window5 sThe service will attempt to refresh tokens expiring within the refresh window, subtracting the configured duration from the token expiration.
SSL Context Service *SSL Context ServiceAn instance of SSLContextProvider configured with a certificate and a private key which will be used to sign the JWT assertion. The keys must use RSA algorithm.
Tenant ID *Tenant IDThe Tenant ID for the Microsoft Graph API
Token Scope *Token ScopeThe scope of the requested token.For Graph API should be: https://graph.microsoft.com/.defaultFor (https://graph.microsoft.com/.defaultFor) Sharepoint should in the following format: https://organization.sharepoint.com/.default (https://organization.sharepoint.com/.default)
Web Client Service *Web Client ServiceThe Web Client Service to retrieve access tokens.

State management

This component does not store state.

Restricted

This component is not restricted.

System Resource Considerations

This component does not specify system resource considerations.