---
id: object/codeunit/6303
type: object
title: Codeunit 6303 "Azure AD Auth Flow"
summary: Codeunit 6303 "Azure AD Auth Flow" in Base Application (System.Azure.Identity). 15 public procedures, 12 events. Present since at least BC23, still in BC30, changed in BC25, BC28.
tier: official
language: en
tags:
  - codeunit
  - base application
versions:
  introduced: null
  last_changed: "28"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: 85926b62fd21d17a26e769aab84326058b94e2a59a44fe1245aa8f84199444f2
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/Modules/System/AzureADAuthentication/AzureADAuthFlow.Codeunit.al
    title: src/Layers/W1/BaseApp/Modules/System/AzureADAuthentication/AzureADAuthFlow.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: codeunit
object_id: 6303
name: Azure AD Auth Flow
namespace: System.Azure.Identity
app: Base Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "25"
  - "28"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 28
  events: 12
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 0
  called_by: 2
  implements: 0
---

# Codeunit 6303 "Azure AD Auth Flow"

> Codeunit 6303 "Azure AD Auth Flow" in Base Application (System.Azure.Identity). 15 public procedures, 12 events. Present since at least BC23, still in BC30, changed in BC25, BC28.

Base Application · System.Azure.Identity · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/Modules/System/AzureADAuthentication/AzureADAuthFlow.Codeunit.al) · facts from BC29

## Events published

- `OnInitialize(RedirectUri: Text; var AzureADAuthFlow: DotNet ALAzureAdCodeGrantFlow)` (integration)
- `OnAcquireTokenByAuthorizationCode(AuthorizationCode: Text; ResourceName: Text; var AccessToken: Text)` (integration)
- `OnAcquireTokenByAuthorizationCodeWithCredentials(AuthorizationCode: Text; ClientID: Text; ApplicationKey: Text; ResourceName: Text; var AccessToken: Text)` (integration)
- `OnAcquireTokenFromCache(ResourceName: Text; var AccessToken: Text)` (integration)
- `OnAcquireTokenFromCacheState(ResourceName: Text; AadUserId: Text; TokenCacheState: Text; var NewTokenCacheState: Text; var AccessToken: Text)` (integration)
- `OnAcquireGuestToken(ResourceName: Text; GuestTenantId: Text; var AccessToken: Text)` (integration)
- `OnAcquireAcquireOnBehalfOfToken(ResourceName: Text; var AccessToken: Text)` (integration)
- `OnAcquireOnBehalfOfTokenAndTokenCacheState(ResourceName: Text; var AccessToken: Text; var TokenCacheState: Text)` (integration)
- `OnAcquireTokenFromCacheWithCredentials(ClientID: Text; AppKey: Text; ResourceName: Text; var AccessToken: Text)` (integration)
- `OnGetSaasClientId(var ClientID: Text)` (integration)
- `OnCreateExchangeServiceWrapperWithToken(Token: Text; var Service: DotNet ExchangeServiceWrapper)` (integration)
- `OnCheckProvider(var Result: Boolean)` (integration)

## Procedures

- `CanHandle(): Boolean`
- `Initialize(RedirectUri: Text)`
- `AcquireTokenByAuthorizationCodeAsSecretText(AuthorizationCode: SecretText; ResourceName: Text): SecretText`
- `AcquireTokenByAuthorizationCodeWithCredentialsAsSecretText(AuthorizationCode: SecretText; ClientID: Text; ApplicationKey: SecretText; ResourceName: Text): SecretText`
- `AcquireTokenFromCacheAsSecretText(ResourceName: Text): SecretText`
- `AcquireTokenFromCacheState(ResourceName: Text; AadUserId: Text; TokenCacheState: Text; var NewTokenCacheState: Text): Text`
- `AcquireGuestToken(ResourceName: Text; GuestTenantId: Text): Text`
- `AcquireOnBehalfOfTokenAsSecretText(ResourceName: Text): SecretText`
- `AcquireOnBehalfOfTokenAndTokenCacheState(ResourceName: Text; var TokenCacheState: Text): Text`
- `AcquireTokenFromCacheWithCredentialsAsSecretText(ClientID: Text; AppKey: SecretText; ResourceName: Text): SecretText`
- `AcquireApplicationToken(ClientID: Text; ClientSecret: Text; Authority: Text; ResourceUri: Text): Text`
- `GetSaasClientId(): Text`
- `GetInitialTenantDomainName(): Text`
- `CreateExchangeServiceWrapperWithToken(Token: SecretText; var Service: DotNet ExchangeServiceWrapper)`
- `GetLastErrorMessage(): Text`

Plus 1 local procedures.

## Triggers

OnRun

## Called by

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 6300 "Azure AD Mgt."](../codeunit/6300.md) (20 calls: `AcquireGuestToken → AcquireGuestToken`, `AcquireGuestToken → Initialize`, `AcquireToken → AcquireTokenFromCacheAsSecretText`, …)
- [Codeunit 5321 "Exchange Web Services Server"](../codeunit/5321.md) (1 call: `ValidCredentials → CanHandle`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC25, BC28

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "Azure AD Auth Flow")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.