Mr.X
Mr.X

Reputation: 31305

What is the meaning of service-to-service application?

In a hunt to understand how RCS can be used with Bots, we were referring to this document and saw a term service-to-service application for choosing an authentication mechanism.

Especially in reference to bots, what is the meaning of a service-to-service application?

Couldn't find any concrete source on Google

Upvotes: 0

Views: 536

Answers (1)

Eric Dahlvang
Eric Dahlvang

Reputation: 8292

The concept is basically that of a trusted application calling a trusted application (the client is another service). Retrieving a service to service token is usually more simple, and quicker, than retrieving a token for a client because the service is already trusted (running in a controlled environment). Here is some info on AD OAuth for svs to svs: https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-service-to-service

In reference to bots specifically, it isn't always necessary to retrieve a token to call the bot, because the secret itself can be used in a service-to-service call (since the code in the service isn't exposed to any end users).

Upvotes: 2

Related Questions