Azure AD by default uses a certificate to sign an OAuth2 JWT token using an asymmetric algorithm (RS256). Alternatively a JWT token can be signed with a “shared” secret using a symmetric algorithm (HS256). Asymmetric signing algorithm is always more secure in preventing the token to be tampered with compared to a symmetric algorithm since the private key is always kept at the Identity Provider (IDP) and the token consumer…
Read MoreRecent Posts
- Authorization_RequestDenied error when using Microsoft Graph API to add user(s) to a group
- ‘Update your browser’ message when using apps that leverage ADAL/MSAL
- How to find the underlying MS Graph URL from a Microsoft Graph PowerShell commandlet
- Tutorial: How to call a protected web API with an application permission token in Azure AD B2C
- Troubleshooting CORS to Azure AD/Entra ID
Archives
- May 2024 (3)
- March 2024 (1)
- August 2023 (1)
- July 2023 (1)
- May 2023 (1)
- March 2023 (3)
- February 2023 (2)
- November 2022 (2)
- October 2022 (3)
- September 2022 (1)
- August 2022 (5)
- July 2022 (2)
- June 2022 (3)
- May 2022 (5)
- April 2022 (4)
- March 2022 (3)
- February 2022 (1)
- January 2022 (1)
- December 2021 (1)
- November 2021 (1)
- August 2021 (2)
- July 2021 (3)
- June 2021 (3)
- April 2021 (3)
- March 2021 (1)
- February 2021 (2)
- January 2021 (3)
- October 2020 (2)
- September 2020 (2)
- August 2020 (3)
- July 2020 (2)
- June 2020 (4)
- May 2020 (2)
- April 2020 (6)
- March 2020 (1)
- January 2020 (3)
- December 2019 (7)
- November 2019 (7)
- October 2019 (1)
- August 2019 (6)
- July 2019 (5)
- June 2019 (1)
- May 2019 (3)
- April 2019 (2)
- March 2019 (3)
- January 2019 (4)
- December 2018 (1)
- November 2018 (4)
- October 2018 (2)
- September 2018 (2)
- August 2018 (2)
- June 2018 (2)
- May 2018 (8)
- April 2018 (6)
- February 2018 (2)
Categories
Tags
.Net
302
403
AAD
AAD Application
AAD Application Registration
AAD Graph API
AADSTS50058
AADSTS90094
AADSTS error
Access Token
ADAL
ADAL .Net
Admin Consent
Administrative
admin privilege
alternative
Android
Api
Application
Application Registration
Application Role
App Service
Authentication
Authorization
Authorization Code
Azure
Azure Active Directory
BusinessPhone
button
Change AAD Application
Client Credential Grant
Client Credentials
Console Application
Create
Graph Explorer
How To
Insufficient Permissions
Keys
Microsoft Graph
Microsoft Graph API
Permissions
Service Principal
Tutorial
Users