https://www.m365.fm/entity/access-token/An access token is a short-lived, signed token issued by an identity provider such as Microsoft Entra ID that lets a client call a protected API within defined scopes or roles.enhttps://www.m365.fm/community/u/mirko-p/blog/id-token-vs-access-token-openid-connect/https://www.m365.fm/community/u/mirko-p/blog/id-token-vs-access-token-openid-connect/Wed, 28 Oct 2026 15:11:01 -0000articleDiscover the critical differences between ID tokens and access tokens in OpenID Connect, and learn why mixing them up creates severe security flaws.https://www.m365.fm/show/episodes/from-figma-design-to-the-powerapps-with-lukas-pavelka-mvp/https://www.m365.fm/show/episodes/from-figma-design-to-the-powerapps-with-lukas-pavelka-mvp/Wed, 06 May 2026 00:00:00 -0000episodeIn this episode of the M365 FM Podcast, Mirko Peters talks with Lukas Pavelka about the future of enterprise app development, AI-assisted coding, and the growing connection between Figma and Microsoft Power Platform. Lukas shares his journey from Java…https://www.m365.fm/community/u/mirko-p/blog/refresh-token-vs-access-token-whats-the-difference-and-why-it-matters-in-microsoft-entra-id/https://www.m365.fm/community/u/mirko-p/blog/refresh-token-vs-access-token-whats-the-difference-and-why-it-matters-in-microsoft-entra-id/Tue, 28 Apr 2026 17:56:05 -0000articleRefresh Token vs Access Token: What’s the Difference and Why It Matters in Microsoft Entra IDhttps://www.m365.fm/community/u/mirko-p/blog/understanding-aadsts700082-and-refresh-token-expired-errors-in-microsoft-oauth/https://www.m365.fm/community/u/mirko-p/blog/understanding-aadsts700082-and-refresh-token-expired-errors-in-microsoft-oauth/Mon, 20 Apr 2026 07:04:41 -0000articleWhen you hit the AADSTS700082 error, Microsoft is telling you your refresh token has expired—usually because it's been sitting around unused for too long. Thi…https://www.m365.fm/show/episodes/powershell-without-modules-graph-api-modern-way/https://www.m365.fm/show/episodes/powershell-without-modules-graph-api-modern-way/Mon, 08 Dec 2025 00:00:00 -0000episodeStill writing PowerShell against MSOnline and AzureAD modules in 2025? This episode explains why that stack is legacy – and how to go API-first with pure REST and Microsoft Graph. We walk through the core “token, headers, REST call” pattern, three real-world…https://www.m365.fm/show/episodes/modern-auth-in-m365-is-a-maze-heres-the-map/https://www.m365.fm/show/episodes/modern-auth-in-m365-is-a-maze-heres-the-map/Tue, 05 Aug 2025 00:00:00 -0000episodeYour Conditional Access policy isn’t the final boss—tokens are. MSAL’s silent refresh + Azure AD’s Continuous Access Evaluation can defer, override, or re-apply your rules mid-session. If you don’t manage the token lifecycle (issue, refresh, revoke), your…