Scary privacy dialogs using OAuth 2 in local Microsoft apps
Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Ask questions, find answers and collaborate at work with Stack Overflow for Teams. Explore Teams
When I set up OAuth authentication in Microsoft applications, I'm prompted with scary dialogs like the ones below. This particular example is from Outlook 2016, configuring a GMail account[1], but I've seen similar screens in other apps.
"Microsoft apps & services" is ambiguous and the prompt doesn't make it clear whether the access and information described will be shared with Microsoft or only the local application I'm using.
Does this authentication take place only between the software on my machine and Google's servers? Or does Microsoft's implementation rely on some of their cloud infrastructure to support the sign-in process?
