{"action":"created","issue":{"url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/11847","repository_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs","labels_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/11847/labels{/name}","comments_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/11847/comments","events_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/11847/events","html_url":"https://github.com/MicrosoftDocs/azure-docs/issues/11847","id":341993737,"node_id":"MDU6SXNzdWUzNDE5OTM3Mzc=","number":11847,"title":"What scope to use for access tokens to Web Application","user":{"login":"valentijnscholten","id":4426050,"node_id":"MDQ6VXNlcjQ0MjYwNTA=","avatar_url":"https://avatars1.githubusercontent.com/u/4426050?v=4","gravatar_id":"","url":"https://api.github.com/users/valentijnscholten","html_url":"https://github.com/valentijnscholten","followers_url":"https://api.github.com/users/valentijnscholten/followers","following_url":"https://api.github.com/users/valentijnscholten/following{/other_user}","gists_url":"https://api.github.com/users/valentijnscholten/gists{/gist_id}","starred_url":"https://api.github.com/users/valentijnscholten/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/valentijnscholten/subscriptions","organizations_url":"https://api.github.com/users/valentijnscholten/orgs","repos_url":"https://api.github.com/users/valentijnscholten/repos","events_url":"https://api.github.com/users/valentijnscholten/events{/privacy}","received_events_url":"https://api.github.com/users/valentijnscholten/received_events","type":"User","site_admin":false},"labels":[{"id":646555990,"node_id":"MDU6TGFiZWw2NDY1NTU5OTA=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/active-directory/svc","name":"active-directory/svc","color":"0040cc","default":false},{"id":836704823,"node_id":"MDU6TGFiZWw4MzY3MDQ4MjM=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/assigned-to-author","name":"assigned-to-author","color":"e01f8f","default":false},{"id":853283851,"node_id":"MDU6TGFiZWw4NTMyODM4NTE=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/product-question","name":"product-question","color":"43e08a","default":false},{"id":836702742,"node_id":"MDU6TGFiZWw4MzY3MDI3NDI=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/triaged","name":"triaged","color":"0e8a16","default":false}],"state":"open","locked":false,"assignee":{"login":"CelesteDG","id":16906646,"node_id":"MDQ6VXNlcjE2OTA2NjQ2","avatar_url":"https://avatars1.githubusercontent.com/u/16906646?v=4","gravatar_id":"","url":"https://api.github.com/users/CelesteDG","html_url":"https://github.com/CelesteDG","followers_url":"https://api.github.com/users/CelesteDG/followers","following_url":"https://api.github.com/users/CelesteDG/following{/other_user}","gists_url":"https://api.github.com/users/CelesteDG/gists{/gist_id}","starred_url":"https://api.github.com/users/CelesteDG/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CelesteDG/subscriptions","organizations_url":"https://api.github.com/users/CelesteDG/orgs","repos_url":"https://api.github.com/users/CelesteDG/repos","events_url":"https://api.github.com/users/CelesteDG/events{/privacy}","received_events_url":"https://api.github.com/users/CelesteDG/received_events","type":"User","site_admin":false},"assignees":[{"login":"CelesteDG","id":16906646,"node_id":"MDQ6VXNlcjE2OTA2NjQ2","avatar_url":"https://avatars1.githubusercontent.com/u/16906646?v=4","gravatar_id":"","url":"https://api.github.com/users/CelesteDG","html_url":"https://github.com/CelesteDG","followers_url":"https://api.github.com/users/CelesteDG/followers","following_url":"https://api.github.com/users/CelesteDG/following{/other_user}","gists_url":"https://api.github.com/users/CelesteDG/gists{/gist_id}","starred_url":"https://api.github.com/users/CelesteDG/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CelesteDG/subscriptions","organizations_url":"https://api.github.com/users/CelesteDG/orgs","repos_url":"https://api.github.com/users/CelesteDG/repos","events_url":"https://api.github.com/users/CelesteDG/events{/privacy}","received_events_url":"https://api.github.com/users/CelesteDG/received_events","type":"User","site_admin":false}],"milestone":null,"comments":3,"created_at":"2018-07-17T16:28:21Z","updated_at":"2018-10-03T04:02:07Z","closed_at":null,"author_association":"NONE","body":"Hi,\n\nWe're trying to use Azure AD as SSO / OIDC provider for our web application.\n\nThe basics are working, we're getting an authorization code via the /authorize endpoint and we can use this to retrieve tokens from the /token endpoint. The scope we're using is \"openid email\".\n\nThis seems to result on only the id_token being returned from the /token end-point. What value for scope can we use to also get access tokens for our own Web application?\nSo we're not looking for access tokens to outlook/exchange, or the graph API.\n\nI've understood from the Azure AD B2C documentation that we should add the Application ID to the scope, similar to the examples above for outlook. However we can't seem to find the right format as everything we try results in an error message stating the scope is in an invalid format\n\nscope=bc51dbae-2378-4874-816c-....../openid (Application ID from azure ad portal)\nscope=https://url-of-our-web-app-configured-as-home-page-in-azure-portal-for-this-app\nscope=&lt;App ID URI generated by Azure AD portal in properties of app&gt;\nscope=bc51dbae-2378-4874-816c-....../openid (Application ID from azure ad portal)\nscope=https://url-of-our-web-app-configured-as-home-page-in-azure-portal-for-this-app/openid\nscope=&lt;App ID URI generated by Azure AD portal in properties of app&gt;/openid\n\n\n\n\n\n\n\n\n---\n#### Document Details\n\n⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*\n\n* ID: 0ac43307-75d4-cb6f-e561-0dd9008f28c6\n* Version Independent ID: 8fc47e76-5ee1-6aeb-73e2-c64c44e3e4ed\n* Content: [Azure Active Directory v2.0 scopes, permissions, and consent](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes)\n* Content Source: [articles/active-directory/develop/active-directory-v2-scopes.md](https://github.com/Microsoft/azure-docs/blob/master/articles/active-directory/develop/active-directory-v2-scopes.md)\n* Service: **active-directory**\n* GitHub Login: @CelesteDG\n* Microsoft Alias: **celested**"},"comment":{"url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/comments/426504756","html_url":"https://github.com/MicrosoftDocs/azure-docs/issues/11847#issuecomment-426504756","issue_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/11847","id":426504756,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNjUwNDc1Ng==","user":{"login":"CelesteDG","id":16906646,"node_id":"MDQ6VXNlcjE2OTA2NjQ2","avatar_url":"https://avatars1.githubusercontent.com/u/16906646?v=4","gravatar_id":"","url":"https://api.github.com/users/CelesteDG","html_url":"https://github.com/CelesteDG","followers_url":"https://api.github.com/users/CelesteDG/followers","following_url":"https://api.github.com/users/CelesteDG/following{/other_user}","gists_url":"https://api.github.com/users/CelesteDG/gists{/gist_id}","starred_url":"https://api.github.com/users/CelesteDG/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CelesteDG/subscriptions","organizations_url":"https://api.github.com/users/CelesteDG/orgs","repos_url":"https://api.github.com/users/CelesteDG/repos","events_url":"https://api.github.com/users/CelesteDG/events{/privacy}","received_events_url":"https://api.github.com/users/CelesteDG/received_events","type":"User","site_admin":false},"created_at":"2018-10-03T04:02:07Z","updated_at":"2018-10-03T04:02:07Z","author_association":"CONTRIBUTOR","body":"@MohitGargMSFT @SaurabhSharma-MSFT @MarileeTurscak-MSFT - Per customer comment, they've found the answer. #please-close Thank you."}}
{"actor":{"display_login":"CelesteDG"}}