Token received from embedded API does not respect TokenLifetimePolicy that has been set in policies

Anonymous — Thu, 30 Jan 2020 13:18:55 GMT

I require the embed tokens I receieve back from the embedded API to live longer than the defaulted hour. I followed the information here

https://docs.microsoft.com/en-gb/azure/active-directory/develop/active-directory-configurable-token-lifetimes#example-token-lifetime-policies

and set a new policy for "AccessTokenLifetime" with the following

 New-AzureADPolicy -Definition @('{"TokenLifetimePolicy":{"Version":1,"AccessTokenLifetime":"23:59:59"}}') -DisplayName "WebPolicyScenario" -IsOrganizationDefault $false -Type "TokenLifetimePolicy"

I then assigned this policy to my application using the Add-AzureADApplicationPolicy command.

However the tokens I get back still have one hour expiration, is there something I am missing? I have also tried setting MaxAgeSessionSingleFactor, but with no success.

Thanks

Re: Token received from embedded API does not respect TokenLifetimePolicy that has been set in polic

samsonfr — Thu, 25 Nov 2021 13:28:46 GMT

Hi,

Same here, we tried it with a Service Principal used in our Embed for your Customers scenario but AuthenticationContext -> AcquireTokenAsync never return more than 1 hour in AuthenticationResult.
We are going to at least make sure to get a full hour instead of a random value (there is a token cache) by using this solution: https://community.powerbi.com/t5/Developer/Generate-Token-API-returns-token-with-variable-short-expirations/m-p/1042168

But did you resolve it any other way?

Thanks,

Frederick

topic Token received from embedded API does not respect TokenLifetimePolicy that has been set in policies in Developer

Token received from embedded API does not respect TokenLifetimePolicy that has been set in policies

Re: Token received from embedded API does not respect TokenLifetimePolicy that has been set in polic