Microsoft Entra ID | Azure Active Directory Token Type | id_token | Access Token | Refresh_Token
#AzureActiveDirectory #AzureADTokenType #AuthenticationToken #TokenType #Token Azure Active Directory Authentication Token id_token Access Token Refresh Token Microsoft Article - https://docs.microsoft.com/en-us/azur... How to use Postman to request token? • Oauth 2.0 Authorization Code Flow | Micros... The below mentioned script will help you to request a new access token and refresh token with the help of current refresh token which you have captured from postman. Also make sure you have replaced the value of clientid and client secret with your directory application. From permission prespective make sure you have granted the application the permission to access user data from the api permission section of the application object in Azure AD. How application works in Azure AD ? • Azure AD application Registration ============================================ SCRIPT BEGINS FROM HERE # Write-Host "Script to request new access token and refresh token from refresh token" $tenant = Read-Host ('Enter your Tenant Name') Write-Host Tenant name you entered is $tenant Write-Host "Enter the value you have copied from postman" $refresh_token = Read-Host ('Enter your refresh token') $Openid = Invoke-RestMethod -uri "https://login.microsoftonline.com/$te..." $authendpoint = $Openid.authorization_endpoint $tokenendpoint = $Openid.token_endpoint Write-Host Authorize endpoint of your tenant is $authendpoint Write-Host Token endpoint of your tenant is $tokenendpoint $Body = @{ client_id = "9a21d7a5-a500-4ee9-8ea27325c24" client_secret = "TrHSZaO53-wwNV__Ff" redirect_uri = "https://localhost" grant_type = "refresh_token" scope= "https://graph.microsoft.com/.default" tenant = "$tenant" refresh_token = $refresh_token } $token = Invoke-RestMethod -uri $tokenendpoint -Body $Body -Method Post $token #SCRIPT ENDS# ============================================= Regards, ConceptsWork

Azure AD Application Proxy

Azure AD App Proxy Deep Dive

Coding Shorts: Using Azure Entra ID to Protect Your APIs

Enhance Azure Security: Harness the Power of RBAC (Role Based Access Control)!

OAuth 2.0 and OpenID Connect (in plain English)

ID Tokens vs Access Tokens - Do you know the difference?!

Protecting Against Credential and Token Theft

Azure AD App Registrations, Enterprise Apps and Service Principals

Certified Pre-Owned: Abusing Active Directory Certificate Services

Validate Microsoft Entra ID generated OAuth tokens

Understanding Azure AD Hybrid Join

Deep-dive to Entra ID Token Theft Protection - Nestori Syynimaa - Ekoparty 2025

Passkeys Explained: Are They Actually Better Than Passwords?

Azure AD application Registration

Azure Active Directory (AD, AAD) Tutorial | Identity and Access Management Service

Why AI Agents are either the best or worst thing we’ve ever built

Azure AD Understanding Tokens

AZ-204 Implement Azure Security - OAUTH

Microsoft Entra ID | Hybrid Azure AD Join Devices | Managed Domains

