---
title: "OAuth 2.0 Device Code Flow Authentication Protocol (DCF)"
canonical: "https://docs.cuesystem.com/space/M3SG/284853099/OAuth%202.0%20Device%20Code%20Flow%20Authentication%20Protocol%20(DCF)"
format: markdown
---
This method is **compatible **with hybrid authentication using

- Active Directory Federation Services (AD FS)
- Multi-factor Authentication (MFA)

A more detailed **description **is available here: [OAuth 2.0 Device Code Flow](https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-device-code)

Required touchONE **management types**:

- [CUE Admin administration](https://docs.cuesystem.com/space/TAM)
- [touchONE-manager on-premises administration](https://docs.cuesystem.com/space/TOA)

> Macro (excerpt)
> 
> > ℹ️ This authentication method can be used in **[Connection agents](https://cue.atlassian.net/wiki/spaces/TAM/pages/18579457)** (except connection agent for apps) **to sign in service accounts**.


> ℹ️ **OAuth 2.0 Device Code Flow** uses **interactive sign-in**. Therefore, **interactive sign-in needs to be enabled** for service accounts and **not blocked by some security or conditional access policy**.