Revoke Token for Power BI Embedded / Python

[Charles001]

I am trying to find a way to revoke an access token.

I am using Power BI Embedded with Python. In the python section I am using Confidential Client Application and method acquire_token_for_client.

All is working fine, but I need to be able to revoke the token on logout.  I understand there is no official way to do this?

So I am looking at possibly updating the access token on logout but not delivering to the browser.  Is this possible?

Thanks in advance.

[v-shex-msft · Accepted solution]

Hi @Charles001,

AFAIK, you cannot directly revoke the current tokens, it has corresponded expiry time. (you can do custom on the azure side to set the general token expired time)

For your requirement, I'd like to suggest you trace the logout operations, and invoke the generate token functions to force generated new token and the old one will be disabled.

In addition, since power bi embed is based on the azure ad, you can also take a look at the following link to revoke the user access:

Revoke user access in an emergency in Azure Active Directory | Microsoft Docs

Regards,

Xiaoxin Sheng