This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Nathan McNulty
nathanmcnulty.com
did:plc:dddixoxorw7rhpyiiauxsh2j
Periodic reminder that even Microsoft recommends disabling Device code flow
The primary two areas I see this used are Teams phones / Conference room type equipment and administrative CLI tools, and you should still block by default and exclude as needed
https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-block-authentication-flows
2026-06-18T03:18:23.067Z