Two kinds of client

Steps

1. Register a public client and exchange a code using PKCE.

   What the server will check: A successful exchange for the public client.

2. Register a confidential client and try to exchange a code without its secret.

   What the server will check: The token endpoint rejected the client.

3. Try again with the secret.

   What the server will check: A successful exchange for the confidential client.

When it opens

This lab is planned. It opens when these are in place:

• Lab setup and cleanup in your test tenant
• The lab callback page

The server checks your test tenant's history for this attempt. You can review the events yourself in your tenant's Audit and Logs.

Learn the theory

• Public and confidential clientsWhere the client runs
• Public and confidential clientsIdentifying and authenticating clients
• Client IDs and registrationOne application, several clients