I have setup the cloud hybrid search between my on-prem SP2016 and SPO (SharePoint Online). I have azure ad synchronized with my ad etc. (without SSO).
sample scenario: I am displaying results from SPO in my webpart on on-prem SP2016. I want user to have possibility to interact with objects from SPO in on-prem SP2016.
When I am using
ClientContext context = new ClientContext(siteUrl) and context.ExecuteQuery() I am getting 403 forbidden error.
The question is how to create authenticated
ClientContext for current user without passing username and password to SPO? Is it possible at all?
We can assume that user is already authenticated in browser in both on-prem and SPO.
I know that it is possible to get
AccessToken but getting
AccessToken requires registering app in SPO to get ClientId etc. and this is not my goal. (or am I wrong here and it is possible to get
AccessToken for current user?)
I cloud try to open http://yourdomain.sharepoint.com/_forms/default.aspx?wa=wsignin1.0 ang get auth Cookies from this and then pass it along with every request header but will this work? (Unfortunately I didnt have time yet to test it and it doesn't seems like best solution ;))
Thanks in advance for any suggestions.