Graph API - Create Application with authorization_code token

Question

I'm trying to register an application in Azure AD using Graph API with an oauth token obtained with the Authorization Code grant type. I can do it with Client Credentials, but not with Authorization Code. With the latter I can list applications, but not create them. Here's the permissions I've set in the application:

And here's what I set in postman to get the token:

I get the token just fine and I can list the applications, but when I try to create a new one through the endpoint 'POST https://graph.microsoft.com/v1.0/applications' I get the following response:

Anyone knows why this is happening? Thanks!

Answer 1

According to the last screenshot you provided, it seems the process stopped at login page(the response body is the html of login page) when do authorization code flow.

I test it in my side(also in postman) but it works fine, below is my configuration in postman for your reference:

Although I didn't reproduce your problem in my test, but I can provide you some information about authorization code backend request to know what does the response in your postman mean.

When we do authorization code flow(not in postman) to get access token, there are two steps. First we need to request the url https://login.microsoftonline.com/{tenantId or commone}/oauth2/authorize?resource=https://graph.microsoft.com&client_id={clientId}&response_type=code&redirect_uri=https://hurytest&response_mode=query in your browser like below screenshot.

We can find the content in the red box in screenshot above is same to the response you get in postman. So I think the process stopped here(which is the first step of authorization code flow).

Second step, we need to input username and password into the login page. It will redirect to another page like below screenshot.

Copy the code after code= in the above screenshot and then use the code in below request to get access token.

In a word, I didn't reproduce your problem in my postman. But the backend request in your postman may stopped in the first step(login page) of authorization code flow which I mentioned above. So please check if you configured correct in postman. If still doesn't work, you can do authorization code flow by the two steps I provided to get the access token.