Client Credential Flow without Admin login <p>Following <a href="https://blogs.msdn.microsoft.com/exchangedev/2015/01/21/building-daemon-or-service-apps-with-office-365-mail-calendar-and-contacts-apis-oauth2-client-credential-flow/" rel="nofollow noreferrer">these</a> instructions on implementing client credential flow, using <a href="https://github.com/mattleib/o365api-as-apponly-webapp" rel="nofollow noreferrer">this</a> sample repo to test on, I got a running version of an app using client credential flow that can read email, calendar, contacts.</p> <p>However I need to sign in with my O365 tenant admin every time I run it and grant access to the application to read emails, calendar, etc. </p> <p>Isn't the whole point of Client Credential Flow (app-only) that I shouldn't need to enter any credentials to read data, since I've created a certificate that connects my AAD-app with my web-app. </p> <p>The only thing I can think of is that I have to sign in with the admin just once to set it up properly, but then it makes no sense that I get prompted to login as admin every time I run the application (running on localhost). </p>