如何连接到 Microsoft 365 活动

概述

Microsoft 365 activities have different authentication flows that you can choose from. Your choice is dependent on: the type of automation mode you plan to run (attended or unattended), the type of projects you want to build (cross-platform or Windows), whether you use Integration Service or not, the type of permissions you want to grant (delegated or app-only), and your application authentication requirements (consult with your administrator if you're unsure which authentication requirements apply to your application).

使用下表了解每种身份验证类型之间的基本区别：

Microsoft 身份验证流程	Microsoft 365 作用域 - 身份验证类型	Integration Service 连接	机器人类型 - Attended	机器人类型 - Unattended	API 权限类型
OAuth 2.0 授权代码流程	交互式令牌 - 公共应用程序	OAuth 2.0 授权代码		(only with Integration Service)*	委派权限
	交互式令牌 - BYOA	自带 OAuth 2.0 应用程序		(only with Integration Service)*	委派权限
Windows 集成身份验证 (IWA)	Windows 集成身份验证	不适用			委派权限
用户名和密码	用户名和密码	不适用			委派权限
OAuth 2.0 客户端凭据流程	应用程序 ID 和密码	不适用			应用程序权限
	应用程序 ID 和证书	不适用			应用程序权限

^* Integration Service keeps the connection token alive by refreshing the token. After a certain period of time, you must manually refresh the connection by re-authentication.

To learn about the specifics of each option, see:

• Connect with Integration Service

• Connect with Microsoft 365 Scope

委派权限与应用程序权限

要了解委派权限和应用程序权限之间的区别，请参阅 Microsoft 官方文档：委派权限和应用程序权限的比较。

简而言之，区别如下：

• 通过委派权限，应用程序可以模拟用户并代表用户执行操作。应用程序只能访问已登录用户可以访问的内容。
• 通过应用程序权限，应用程序可自行运行，无需用户登录。应用程序可以访问与其权限关联的任何数据。

对于委派权限和应用程序权限，您可以使用创建应用程序时定义的作用域来限制应用程序可以访问和不可以访问的内容。请参阅 Microsoft 文档中的作用域和权限。

Note: Many organizations require an administrator's consent before creating a connection to an external application. The admin consent workflow requires an admin to approve the app registration to specific users or groups before a connection is established. For more information, see Overview of admin consent workflow and User and admin consent in Microsoft Entra ID in the Microsoft documentation.

多租户应用程序与单租户应用程序

Microsoft 365 作用域和 Integration Service 连接都支持单租户应用程序和多租户应用程序。要了解两者之间的区别，请参阅 Microsoft 官方文档中的谁可以登录您的应用程序？。

Azure 环境

Both Microsoft 365 Scope and Integration Service connections support multiple Azure environments. For details, see Microsoft Graph and Graph Explorer service root endpoints.

Microsoft National Cloud	Environment in Integration Service	Environment in Microsoft 365Scope
Microsoft Graph global service	默认	Azure, Azure Global
Microsoft Graph for US Government L4	US Government L4	US Government
Microsoft Graph for US Government L5	US Government L5	不适用
Microsoft Graph China	中国	中国