---
title: "OAuth 2.0 Resource Owner Password Credentials Authentication Protocol (ROPC)"
canonical: "https://docs.cuesystem.com/space/M3SG/284754771/OAuth%202.0%20Resource%20Owner%20Password%20Credentials%20Authentication%20Protocol%20(ROPC)"
format: markdown
---
> ⚠️ **This method is not compatible with hybrid authentication using Active Directory Federation Services (AD FS) and Multi-factor Authentication (MFA)**. If these protocols are mandatory, use one of the following solutions:

- Use **[Device Code Flow](https://cue.atlassian.net/wiki/spaces/M3SG/pages/284853099)** authentication
- Alternatively, **disable MFA for service accounts** (the MFA is primarily intended for user authentication, not for machine-to-machine communication, such as Reservation panel communication with a calendar server), and **service accounts must be configured to authenticate using Microsoft Identity** and not your AD FS.

A more detailed **description **is available here: [OAuth 2.0 Resource Owner Password Credentials](https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc)

Required touchONE **management types**:

- [CUE Admin administration](https://docs.cuesystem.com/space/TAM)
- [touchONE-manager on-premises administration](https://docs.cuesystem.com/space/TOA)
- [Essential setup](https://docs.cuesystem.com/space/TES)
- [touchONE-concentrator](https://docs.cuesystem.com/space/TOCSG) for reservation interfaces only.

> Macro (excerpt-include)