Validity of refresh tokens

captain_atharv 511 Reputation points
2022-06-13T06:46:16.207+00:00

Hi,

I'm following https://learn.microsoft.com/en-us/graph/auth-v2-user?context=graph%2Fapi%2F1.0&view=graph-rest-1.0 to generate access token on behalf of users. I would like to know what is the default expiry time of refresh tokens and is there a way to configure it?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
0 comments No comments
{count} votes

Accepted answer
  1. CarlZhao-MSFT 46,376 Reputation points
    2022-06-13T07:01:05.827+00:00

    Hi @captain_atharv

    I would like to know what is the default expiry time of refresh tokens.

    The default lifetime for the refresh tokens is 24 hours for single page apps and 90 days for all other scenarios. https://learn.microsoft.com/en-us/azure/active-directory/develop/refresh-tokens#refresh-token-lifetime

    is there a way to configure it?

    You can not set token lifetime policies for refresh tokens. https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes#token-lifetime-policies-for-refresh-tokens-and-session-tokens


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.