Hello. I'm developing an application that allows users to create Teams online meetings. The users don't log in with their Microsoft account and my application creates the meeting on their behalf. I have followed this page's procedure to get an access token for the application. POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token HTTP/1.1 Host: login.microsoftonline.com Content-Type: application/x-www-form-urlencoded client_id=MyAppClientID &scope=https%3A%2F%2Fgraph.microsoft.com%2F.default &client_secret=MyAppClientSecretPassword &grant_type=client_credentials But I couldn't get the refresh token following the above steps, so the process of getting the access token is required to create online meeting every time. Is there any way to get the refresh token for the application without the user? Best regards.

Hi @Relephant The client credential flow does not allow the issuance of refresh tokens. If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Microsoft Graph API - How to get refresh token for my application without a user

Accepted answer

CarlZhao-MSFT 36,896 Reputation points

2021-11-17T08:26:44.25+00:00

Hi @Relephant

The client credential flow does not allow the issuance of refresh tokens.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Relephant 46 Reputation points

2021-11-17T09:09:53.787+00:00

Hello, @CarlZhao-MSFT

Thanks for the reply.
So, is there any way to simplify the process of 1)getting an access token, and 2)creating a meeting (https://graph.microsoft.com/beta/users/tenant/onlineMeetings)?
I prefer to use one access token if possible.
Do I have to get an access token every time I create a meeting?

CarlZhao-MSFT 36,896 Reputation points

2021-11-17T09:12:56.923+00:00

Hi @Relephant

Do you mean want to extend the lifetime of the access token?

CarlZhao-MSFT 36,896 Reputation points

2021-11-17T09:18:01.387+00:00

Yes, the token has only a 1-hour lifetime. If you create a meeting 1 hour after obtaining the token, you need to obtain a new token, but you can customize the token lifetime. https://learn.microsoft.com/en-us/answers/questions/625421/graph-api-token-expires-too-quickly.html

Relephant 46 Reputation points

2021-11-17T09:34:18.443+00:00

Hm. Thank you.
How many days maximum can I extend the token lifetime?

CarlZhao-MSFT 36,896 Reputation points

2021-11-17T09:41:53.94+00:00

Hi @Relephant

If you customize the token lifetime, theoretically there should be no time limit.

Relephant 46 Reputation points

2021-11-17T09:45:33.91+00:00

Thanks! I'll try it right away.

CarlZhao-MSFT 36,896 Reputation points

2021-11-19T01:57:17.547+00:00

Hi dear @Relephant

Have you encountered a new problem?

Relephant 46 Reputation points

2021-11-19T05:22:14.907+00:00

Thanks @CarlZhao-MSFT .

It's actually the same problem. I'm little confused...
I have posted a new question here, please advise if you are good at this.

CarlZhao-MSFT 36,896 Reputation points

2021-11-19T07:40:33.663+00:00

Hi @Relephant

Sorry, this is my negligence. We can customize the lifetime of the token, but the maximum cannot exceed 24 hours. see: https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes#access-id-and-saml2-token-lifetime-policy-properties

CarlZhao-MSFT 36,896 Reputation points

2021-11-22T09:15:45.86+00:00

Hi @Relephant Would you please provide us with an update on the status of your issue?

Magalhaes Sousa, David 1 Reputation point

2022-12-28T11:39:05.26+00:00

For anyone who encounters this, the limit is:
$policy = New-AzureADPolicy -Definition @('{"TokenLifetimePolicy":{"Version":1,"AccessTokenLifetime":"23:59:59"}}') -DisplayName "WebPolicyScenario" -IsOrganizationDefault $false -Type "TokenLifetimePolicy"
Sign in to comment

Microsoft Graph API - How to get refresh token for my application without a user

0 additional answers