title: Azure Active Directory v2.0 Daemons and Server Side Apps Support
body: <p>Trying to get clarity as to if the current v2.0 endpoint supports the Daemons and server-side apps flow.</p>
  <p>This article talks about the flows: <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-flows" rel="noreferrer">https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-flows</a></p>
  <p>It states:</p>
  <blockquote>
  <p>This article describes the types of apps that you can build by using Azure AD v2.0, regardless of your preferred language or platform. The information in this article is designed to help you understand high-level scenarios before you start working with the code.</p>
  </blockquote>
  <p>Further it states:</p>
  <blockquote>
  <p>Currently, the types of apps in this section are not supported by the v2.0 endpoint, but they are on the roadmap for future development. For additional limitations and restrictions for the v2.0 endpoint</p>
  </blockquote>
  <p>In the end I'm trying to build an app that connects to the Graph API that on a schedule connects to the API with &quot;credentials&quot; that allow it to access the API on behalf of a user that has allowed it to.</p>
  <p>In my test harness I can get a token using:</p>
  <pre><code>var pca = new PublicClientApplication(connector.AzureClientId)
            {
               RedirectUri = redirectUrl
            };
  var result = await pca.AcquireTokenAsync(new[] {&quot;Directory.Read.All&quot;},
                  (Microsoft.Identity.Client.User) null, UiOptions.ForceLogin, string.Empty);
  </code></pre>
  <p>In the same harness I cannot get a token using:</p>
  <pre><code>var cca = new ConfidentialClientApplication(
                  connector.AzureClientId,
                  redirectUrl,
                  new ClientCredential(connector.AzureClientSecretKey),
                  null) {PlatformParameters = new PlatformParameters()};
  
  var result = await cca.AcquireTokenForClient(new[] { &quot;Directory.Read.All&quot; }, string.Empty);
  </code></pre>
  <p>This will result in:</p>
  <blockquote>
  <p>Exception thrown: 'Microsoft.Identity.Client.MsalServiceException' in mscorlib.dll</p>
  <p>Additional information: AADSTS70011: The provided value for the input
  parameter 'scope' is not valid. The scope Directory.Read.All is not
  valid.
  Trace ID: dcba6878-5908-44a0-95f3-c51b0b4f1a00
  Correlation ID: 1612e41a-a283-4557-b462-09653d7e4c21
  Timestamp: 2017-04-10 20:53:05Z</p>
  </blockquote>
  <p>The MSAL package, Microsoft.Identity.Client (1.0.304142221-alpha), has not been updated since April 16, 2016. Is that even the package I should be using?</p>