How to update the identity token from Azure AD in a web application?

Question

I am trying to configure an Azure application to authenticate with Azure AD and automatically update the ID identifier behind the scenes. A great blog post helped me understand how it all works: https://cgillum.tech/2016/03/07/app-service-token-store/

And this tutorial related to this helped me set it up: http://cgillum.tech/2016/03/25/app-service-auth-aad-graph-api/

It seems that activating update tokens for Azure AD authentication is not so easy, as it is recommended that you use the above guide to configure it, as if it were for GraphApi.

The problem I encountered, even after calling the endpoint ".auth / refresh" and then calling the endpoint ".auth / me", the only token that is updated is the access token. This token is useless to me since I use Id Token when communicating with my server server (using the "Authorization Bearer" header).

So how can I update the identifier token?

Answer 1

Unfortunately, AAD does not support updating the ID token. Only access token can be updated. See here: https://azure.microsoft.com/en-us/documentation/articles/active-directory-protocols-oauth-code/#refreshing-the-access-tokens

, , . id_token , .