Access is granted by sending the ID token sent by the getAuthToken() method from the Teams SDK. However, according to the
docs an access token should be used.
Can I aquire an access token with the ID token I received and if so, what changes do I have to make to the authorization configuration to accept this access token? (note that I do not require MS Graph permissions beyond those already included in SSO).
Member
2 Points
7 Posts
Web-API accepts ID tokens aquired through SSO for Authorizion, expected to require access tokens
Nov 09, 2020 09:43 AM|marwalsch|LINK
I have a Microsoft Teams Tab that uses SSO to access a Web-API. [Authorize] is configured as
services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme) .AddJwtBearer(options => { options.Audience = Configuration["{api//endpointSetInAzure}"]; options.Authority = "https://sts.windows.net/{tenant}/"; });Access is granted by sending the ID token sent by the getAuthToken() method from the Teams SDK. However, according to the docs an access token should be used.
Can I aquire an access token with the ID token I received and if so, what changes do I have to make to the authorization configuration to accept this access token? (note that I do not require MS Graph permissions beyond those already included in SSO).
Member
2 Points
7 Posts
Re: Web-API accepts ID tokens aquired through SSO for Authorizion, expected to require access tok...
Jan 25, 2021 12:16 PM|marwalsch|LINK
Despite confusing docs and the missing nonce, the Token is in act an access token. See here.