Specific attributes requested by specflow via User.Read on the graph api
Answered
Hello,
We're using specflow in our organization and have granted the admin consent for users to sign in. We have an external vendor that has concerns around sharing their staff's personal information outside of their organization.
The specflow app requires the user.read claim on the graph API - Microsoft's documentation shows that there's a default set of attributes requested, and that custom queries can be written to retrieve any profile information about a user.
What specific attributes on a user's profile does the specflow application request?
I checked through the specflow documentation, it doesn't get into the details.
-
As this can change in the future, I can only point you to our privacy policy (https://specflow.org/about/privacy-policy/) and Terms and conditions (https://specflow.org/about/terms-and-conditions/).
0 -
Hi Andreas,
Thank you for the fast response - understood that it could change at any time without notice, given that the contract agreed on when the consent is given is "up to and including everything user.read on the Graph API provides".
I'll forward this information on, and inform our vendor they should assume that is the scenario.
Thanks again!
0
Please sign in to leave a comment.
Comments
2 comments