php - 无法在 php 中获取 Microsoft Dynamics 中的访问 token ？

Question

我们已经在Azure事件目录中创建了应用程序。在此之前，我有过在Azure目录中提供相同权限来获取访问 token 的经验。但我现在无法通过使用具有相同权限的相同应用程序来获取它。

我的要求是:

  https://login.microsoftonline.com/common/oauth2/authorize?client_id=my_client_id&redirect_uri=https://xxx/msd1/authorize.php&response_type=code

回应

  stdClass Object
  (
[error] => invalid_grant
[error_description] => AADSTS65001: The user or administrator has not consented to use the application with ID 'client_id'. Send an interactive authorization request for this user and resource.
 Trace ID: 6f01144c-4dc0-4911-9923-1cf134d264f0
 Correlation ID: f5765d5f-7109-48a3-89f0-2729c15551c3
 Timestamp: 2016-05-20 06:09:47Z
      [error_codes] => Array
        (
        [0] => 65001
        )

  [timestamp] => 2016-05-20 06:09:47Z
  [trace_id] => 6f01144c-4dc0-4911-9923-1cf134d264f0
  [correlation_id] => f5765d5f-7109-48a3-89f0-2729c15551c3
 )

我哪里出错了？这是权限相关的问题吗？

如何获取此访问 token ？

Answer 1

可能您用于注册应用程序的帐户没有管理员权限，或者不在同一 Office 365 订阅(租户)中。

我们可以找到需求:

Sign in to the Microsoft Azure management portal by using an account with administrator permission. You must use an account in the same Office 365 subscription (tenant) as you intend to register the app with. You can also access the Microsoft Azure portal through the Office 365 admin center by expanding the ADMIN item in the left navigation pane and selecting Azure AD.

请引用App registration for CRM Online了解详情。