title: Allow application access to Azure AD protected URL without username/password
body: <p>Never thought I'd run into an issue of having <strong>too much</strong> documentation! I need help with picking the right information so I can read it, understand it, and follow it.</p>
  
  <p>My scenario:</p>
  
  <p>I have an ASP .NET Web Application that is hosted on mywebapp.azurewebsites.net
  The web app has a full REST API at mywebapp.azurewebsites.net/api/v1/dostuff/1</p>
  
  <p>You can go to the site and perform all the CRUD stuff. You can also use desktop application to do the same.</p>
  
  <p>I went ahead and enabled Azure AD authentication in Azure Portal. Now in order to do anything on the website, users need to sign in. It brings up the usual Microsoft Login popup and then upon successful authentication redirects back to the site.</p>
  
  <p>But when it comes to the desktop app, I want the users to be able to use it without signing in. Somehow my desktop application needs to be able to make calls to the API/website and be authenticated!</p>
  
  <p>At this point I am lost if there is something I need to do in manifest file, or in the web app, or elsewhere?</p>
  
  <p>Most I was able to do is get an access token using client credentials/client secret.</p>
  
  <p>I just need to know if what I am trying to achieve possible and which document explains the approach of doing so.</p>