msal_daemon_app_client_credentials_token_acquisition.py

1import msal
2import logging
3
4# Optional: Configuration can be loaded from a JSON file or environment variables
5config = {
6    "authority": "https://login.microsoftonline.com/Enter_the_Tenant_Id_Here",
7    "client_id": "Enter_the_Application_Id_Here",
8    "scope": ["https://graph.microsoft.com/.default"],
9    "secret": "Enter_the_Client_Secret_Here",
10}
11
12# Create a preferably long-lived app instance which maintains its own token cache.
13app = msal.ConfidentialClientApplication(
14    config["client_id"], 
15    authority=config["authority"],
16    client_credential=config["secret"],
17)
18
19# The pattern to acquire a token looks like this.
20result = None
21
22# First, look for a token from the cache
23result = app.acquire_token_silent(config["scope"], account=None)
24
25if not result:
26    logging.info("No suitable token exists in cache. Let's get a new one from Microsoft Entra ID.")
27    result = app.acquire_token_for_client(scopes=config["scope"])
28
29if "access_token" in result:
30    # Use the token to call a web API (like Microsoft Graph)
31    print("Token acquired successfully")
32    print(result["access_token"])
33else:
34    print(result.get("error"))
35    print(result.get("error_description"))
36    print(result.get("correlation_id"))  # You may need this when reporting a bug