Merge pull request #182980 from bernawy/patch-31

b2c-support: Add this refresh token issue to FAQ

Author: v-shils

articles/active-directory-b2c/faq.yml

@@ -9,9 +9,10 @@ metadata:
   ms.service: active-directory
   ms.workload: identity
   ms.topic: conceptual
-  ms.date: 12/9/2021
+  ms.date: 01/03/2022
   ms.author: kengaderdus
   ms.subservice: B2C
+  ms.custom: "b2c-support"
 
 title: 'Azure AD B2C: Frequently asked questions (FAQ)'
 summary: This page answers frequently asked questions about the Azure Active Directory B2C (Azure AD B2C). Keep checking back for updates.
@@ -227,6 +228,18 @@ sections:
           * API connectors
           * Conditional Access
           
+      - question: |
+          I have revoked the refresh token using Microsoft Graph invalidateAllRefreshTokens, or Azure AD PowerShell,  Revoke-AzureADUserAllRefreshToken. Why is Azure AD B2C still accepting the old refresh token?
+        answer: |
+          In Azure AD B2C, if the time difference between `refreshTokensValidFromDateTime` and `refreshTokenIssuedTime` is less than or equal to 5 minutes, the refresh token is still considered as valid. However, if the `refreshTokenIssuedTime` is greater than the `refreshTokensValidFromDateTime`, then the refresh token is revoked.
+          Follow the following steps to check if the refresh token is valid or revoked:
+          1. Retrieve the `RefreshToken` and the `AccessToken` by redeeming `authorization_code`.
+          1. Wait for 7 minutes.
+          1. Use PowerShell cmdlet [Revoke-AzureADUserAllRefreshToken](https://docs.microsoft.com/powershell/module/azuread/revoke-azureaduserallrefreshtoken?view=azureadps-2.0) or Microsoft Graph API [invalidateAllRefreshTokens](https://docs.microsoft.com/graph/api/user-invalidateallrefreshtokens?view=graph-rest-beta&tabs=http) to run the `RevokeAllRefreshToken` command.
+          1. Wait for 10 minutes.
+          
+          1. Retrieve the `RefreshToken` again.
+          
       - question: |
           How do I report issues with Azure AD B2C?
         answer: |