Token received from embedded API does not respect TokenLifetimePolicy that has been set in policies

[Anonymous]

I require the embed tokens I receieve back from the embedded API to live longer than the defaulted hour. I followed the information here

https://docs.microsoft.com/en-gb/azure/active-directory/develop/active-directory-configurable-token-...

and set a new policy for "AccessTokenLifetime" with the following

 New-AzureADPolicy -Definition @('{"TokenLifetimePolicy":{"Version":1,"AccessTokenLifetime":"23:59:59"}}') -DisplayName "WebPolicyScenario" -IsOrganizationDefault $false -Type "TokenLifetimePolicy"

I then assigned this policy to my application using the Add-AzureADApplicationPolicy command.

However the tokens I get back still have one hour expiration, is there something I am missing? I have also tried setting MaxAgeSessionSingleFactor, but with no success.

Thanks

[samsonfr]

Hi,

Same here, we tried it with a Service Principal used in our Embed for your Customers scenario but AuthenticationContext -> AcquireTokenAsync never return more than 1 hour in AuthenticationResult.
We are going to at least make sure to get a full hour instead of a random value (there is a token cache) by using this solution: https://community.powerbi.com/t5/Developer/Generate-Token-API-returns-token-with-variable-short-expi...

But did you resolve it any other way?

Thanks,

Frederick