Browserless Entra Device Code Flow

Did you know that it is possible to perform every step in Entra’s OAuth 2.0 Device Code flow — including the user authentication steps — without a browser?

Why that matters:

• Automating authentication flows enables and accelerates comprehensive and ongoing offensive research


• Headless authentication frees red teamers and pentesters from requiring browser or cookie access


• Demonstrating and explaining the automated flow enables future research and tooling by other parties, including automation of other …

authentication azure browser cloud computing cloud security code cybersecurity device entra flow germany headless information technology microsoft oauth oauth 2.0 offensive photo research sbn news