An access token is a short-lived, signed token issued by an identity provider such as Microsoft Entra ID that lets a client call a protected API within defined scopes or roles.
In this episode of the M365 FM Podcast, Mirko Peters talks with Lukas Pavelka about the future of enterprise app development, AI-assisted coding, and the growing connection between Figma and Microsoft Power Platform. Lukas shares his journey from Java…
Your Conditional Access policy isn’t the final boss—tokens are. MSAL’s silent refresh + Azure AD’s Continuous Access Evaluation can defer, override, or re-apply your rules mid-session. If you don’t manage the token lifecycle (issue, refresh, revoke), your…
Still writing PowerShell against MSOnline and AzureAD modules in 2025? This episode explains why that stack is legacy – and how to go API-first with pure REST and Microsoft Graph. We walk through the core “token, headers, REST call” pattern, three real-world…
What is the difference between access and refresh tokens?
An access token is a short-lived badge of roughly an hour. A refresh token is a longer-lived wristband, lasting days or weeks, that lets MSAL get new access tokens without prompting the user. · From the episode: Modern Authentication and Token Lifecycle in…
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.