From the course: Integrate Microsoft Graph in Your Applications
Unlock the full course today
Join today to access over 24,700 courses taught by industry experts.
All about tokens
From the course: Integrate Microsoft Graph in Your Applications
All about tokens
- [Instructor] Now let's talk about tokens. But first, where do tokens fit into the picture here? So when you call Microsoft Graph, Microsoft Graph is an API, so how is that API going to authenticate and authorize you? The answer is with tokens. So let's understand these a little bit better. Now, I must say that what I'm about to describe here is more of a Entra ID concept, but it is something so essential to knowing when you call Graph APIs. There are three kinds of tokens. The first are ID tokens. They are used to establish the user's identity. Now, in the context of Microsoft Graph, you will never send an ID token to Microsoft Graph. An ID token is between you and your application. It is used to establish the user's identity. So if you're using a web-based application, Entra ID is going to issue an ID token. That contains my identity if I'm logged in to your application, to your web application. And the web application is going to send me a cookie that maintains my session. That's…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.