The Auth Chapter Every MCP Tutorial Skips: Real SSO for Microsoft Graph
Production auth for an MCP server on Microsoft Graph: browser SSO with a public client and PKCE, delegated tokens, the On-Behalf-Of exchange, and the engineering that keeps an 85-tool surface safe.
