Scp scope missing in JWT token

[Anonymous]

Hello Team,

 I am able to generate  JWT token using API but while validatign found scp scope missing in token. Although I have assigned maximum deligation roles but no success. Please advice.

{
"typ": "JWT",
"nonce": "y1Sb0VoMvGpD1TQiZlxWBM-_JvQrPG_7WzdwbmIESYc",
"alg": "RS256",
"x5t": "piVlloQDSMKxh1m2ygqGSVdgFpA",
"kid": "piVlloQDSMKxh1m2ygqGSVdgFpA"
}.{
"aud": "https://graph.microsoft.com",
"iss": "https://sts.windows.net/XXXXXXXXXXXXXXXXX/",
"iat": 1577713694,
"nbf": 1577713694,
"exp": 1577717594,
"aio": "42VgYIi69Pkt7wHJXzMEWSU1z/x1BwA=",
"app_displayname": "sadikapp",
"appid": "XXXXXXXXXXXXXXXXX",
"appidacr": "1",
"idp": "https://sts.windows.net/XXXXXXXXXXXXXXXXX/",
"oid": "7f83c346-b242-4710-8777-debc22435a74",
"roles": [
"Mail.ReadWrite",
"User.ReadWrite.All",
"Mail.ReadBasic.All",
"Directory.ReadWrite.All",
"User.Invite.All",
"Directory.Read.All",
"User.Read.All",
"Mail.Read",
"Mail.Send",
"Mail.ReadBasic"
],
"sub": "XXXXXXXXXXXXXXXXXXX",
"tid": "XXXXXXXXXXXXXXXXX",
"uti": "xnX0Axh_skqcBUKsaohxAA",
"ver": "1.0",
"xms_tcdt": 1577126734
}.[Signature]

Thanks,

Sadik Ali

[v-yuta-msft · Accepted solution]

@Anonymous ,

I would suggest you refer to doc below:

https://docs.microsoft.com/en-us/azure/active-directory/develop/developer-glossary

Community Support Team _ Jimmy Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.