Reputation: 31305
In a hunt to understand how RCS can be used with Bots, we were referring to this document and saw a term service-to-service application for choosing an authentication mechanism.
Especially in reference to bots, what is the meaning of a service-to-service application?
Couldn't find any concrete source on Google
Upvotes: 0
Views: 536
Reputation: 8292
The concept is basically that of a trusted application calling a trusted application (the client is another service). Retrieving a service to service token is usually more simple, and quicker, than retrieving a token for a client because the service is already trusted (running in a controlled environment). Here is some info on AD OAuth for svs to svs: https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-service-to-service
In reference to bots specifically, it isn't always necessary to retrieve a token to call the bot, because the secret itself can be used in a service-to-service call (since the code in the service isn't exposed to any end users).
Upvotes: 2