Access Token Issuer from Azure AD is sts.windows.net Instead Of login.microsoftonline.com

[Clippy]

Access Token Issuer from Azure AD is sts.windows.net Instead Of login.microsoftonline.com

[Clippy]

(Update 2025): The property is now named `requestedAccessTokenVersion` in the new "Microsoft Graph App Manifest". [https://learn.microsoft.com/en-us/entra/identity-platform/azure-active-directory-graph-app-manifest-deprecation#attribute-differences-between-azure-ad-graph-and-microsoft-graph-formats](https://learn.microsoft.com/en-us/entra/identity-platform/azure-active-directory-graph-app-manifest-deprecation#attribute-differences-between-azure-ad-graph-and-microsoft-graph-formats). The default value is still `null` and needs to be changed to 2.

Original Answer:

So seems that changing the acceptedTokenVersion to 2 in the manifest did change but it just took time to take effect.

And yes the audience is always the client id based on my tests in v2 tokens.