From the course: Integrate Microsoft Graph in Your Applications

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

All about tokens

All about tokens

- [Instructor] Now let's talk about tokens. But first, where do tokens fit into the picture here? So when you call Microsoft Graph, Microsoft Graph is an API, so how is that API going to authenticate and authorize you? The answer is with tokens. So let's understand these a little bit better. Now, I must say that what I'm about to describe here is more of a Entra ID concept, but it is something so essential to knowing when you call Graph APIs. There are three kinds of tokens. The first are ID tokens. They are used to establish the user's identity. Now, in the context of Microsoft Graph, you will never send an ID token to Microsoft Graph. An ID token is between you and your application. It is used to establish the user's identity. So if you're using a web-based application, Entra ID is going to issue an ID token. That contains my identity if I'm logged in to your application, to your web application. And the web application is going to send me a cookie that maintains my session. That's…

Contents