2.2.3.3.2 resource response parameter

 HTTP/1.1 200 OK
 Content-Type: application/json;charset=UTF-8
 {"access_token":{access_token},"token_type":{token_type},"expires_in":{expires_in},"resource":{resource},"refresh_token":{refresh_token}}

OPTIONAL

The resource response parameter is optional, and can be specified by the server role of the OAuth 2.0 Protocol Extensions when returning a refresh token. The AD FS server returns the same value of the resource parameter specified by the client in the request, or "urn:microsoft:userinfo" if the resource parameter is not specified by the client in the request, to indicate to the client that the refresh token in the response is a multi-resource refresh token.

The AD FS server does not return this parameter unless its ad_fs_behavior_level is AD_FS_BEHAVIOR_LEVEL_2 or higher.

The format for the resource response parameter is as follows.

 String = *(%x20-7E)
 resource = String