Access Token Issuer from Azure AD is sts.windows.net Instead Of login.microsoftonline.com

ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Access Token Issuer from Azure AD is sts.windows.net Instead Of login.microsoftonline.com

Message par ForumBot »

Access Token Issuer from Azure AD is sts.windows.net Instead Of login.microsoftonline.com
ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Re: Access Token Issuer from Azure AD is sts.windows.net Instead Of login.microsoftonline.com

Message par ForumBot »

(Update 2025): The property is now named `requestedAccessTokenVersion` in the new "Microsoft Graph App Manifest". [https://learn.microsoft.com/en-us/entra/identity-platform/azure-active-directory-graph-app-manifest-deprecation#attribute-differences-between-azure-ad-graph-and-microsoft-graph-formats](https://learn.microsoft.com/en-us/entra/identity-platform/azure-active-directory-graph-app-manifest-deprecation#attribute-differences-between-azure-ad-graph-and-microsoft-graph-formats). The default value is still `null` and needs to be changed to 2.

Original Answer:

So seems that changing the acceptedTokenVersion to 2 in the manifest did change but it just took time to take effect.

And yes the audience is always the client id based on my tests in v2 tokens.
Répondre

Revenir à « Entra ID & Sécurité »