Skip to content

Commit aa11f20

Browse files
authored
Merge pull request #98274 from yihezkel/patch-16
Update access-tokens.md
2 parents 4486eb7 + 94fc61d commit aa11f20

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/active-directory/develop/access-tokens.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -280,7 +280,7 @@ An application may receive tokens for a user or directly from an application thr
280280
- Use `roles` to see permissions that have been granted to the subject of the token.
281281
- Use `oid` or `sub` to validate that the calling service principal is the expected one.
282282

283-
If the application needs to distinguish between app-only access tokens and access tokens for users, use the `idtyp` [optional claim](active-directory-optional-claims.md). Add the `idtyp` claim to the `accessToken` field, and check for the value `app`, app-only access tokens can be detected. ID tokens and access tokens for users won't have the `idtyp` claim included.
283+
If the application needs to distinguish between app-only access tokens and access tokens for users, use the `idtyp` [optional claim](active-directory-optional-claims.md). To detect app-only access tokens, add the `idtyp` claim to the `accessToken` field, and check for the value `app`. ID tokens and access tokens for users won't have the `idtyp` claim included.
284284

285285
## Token revocation
286286

0 commit comments

Comments
 (0)