How to enable id token encryption in JWT token while using v2 endpoint?

Question

How to enable id token encryption in JWT token while using v2 endpoint?

Yuri Liang 5

Hello,

As I followed https://github.com/AzureAD/microsoft-identity-web/wiki/Token-Decryption step by step, but I cannot make it worked. Even though I configure the certificate and the manifest in the app registration, Azure still send me the base64 encoded token, not an encrypted token.

Gudivada Adi Navya Sri 21,080 Reputation points Moderator

2024-08-14T06:01:30.67+00:00

Hi @Yuri Liang

Thank you for posting this in Microsoft Q&A.

1.Can you please double-check that you've uploaded the correct certificate to the app registration in Azure AD/Microsoft Entra. Make sure it's a valid X.509 certificate in PEM or PFX format.

2.What is the algorithm used in the headers section when encoding an access token?

3.Could you please share the request you used to obtain an access token along with a screenshot of the decoded token?

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.
Yuri Liang 5 Reputation points

2024-08-16T04:03:26.5633333+00:00
Hi Navya,

Thanks for your answer.

I did upload the certificate to Microsoft Entra and saw the related info appear in the keyCredentials blocks in the manifests.

Maybe RSA? Because we are using the public key provided by Microsoft. We can get the key ID from the returned JWT header.

Screenshot as below. not sure if this is what you want. After accessing the url, browser will redirect me to microsoft login page and I input email and passwd, then microsoft will post the rediectURL with JWT token.

Hope this can clarify. Looking forward to your reply! Thanks!
Yuri Liang 5 Reputation points

2024-08-21T02:38:02.75+00:00

@Navya Do you have any idea?
Gray Yeung 0 Reputation points

2024-10-09T03:02:51.9633333+00:00

I have the same issue.
Gray Yeung 0 Reputation points

2024-10-09T03:03:33.0533333+00:00

@Navya

Do you have any idea?
I faced the same issue.

Your answer

Gudivada Adi Navya Sri 21,080 Reputation points Moderator

2024-08-14T06:01:30.67+00:00

Hi @Yuri Liang

Thank you for posting this in Microsoft Q&A.

1.Can you please double-check that you've uploaded the correct certificate to the app registration in Azure AD/Microsoft Entra. Make sure it's a valid X.509 certificate in PEM or PFX format.

2.What is the algorithm used in the headers section when encoding an access token?

3.Could you please share the request you used to obtain an access token along with a screenshot of the decoded token?

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.
Yuri Liang 5 Reputation points

2024-08-16T04:03:26.5633333+00:00

Hi Navya,

Thanks for your answer.

I did upload the certificate to Microsoft Entra and saw the related info appear in the keyCredentials blocks in the manifests.

Maybe RSA? Because we are using the public key provided by Microsoft. We can get the key ID from the returned JWT header.

Screenshot as below. not sure if this is what you want. After accessing the url, browser will redirect me to microsoft login page and I input email and passwd, then microsoft will post the rediectURL with JWT token.

Hope this can clarify. Looking forward to your reply! Thanks!
Yuri Liang 5 Reputation points

2024-08-21T02:38:02.75+00:00

@Navya Do you have any idea?
Gray Yeung 0 Reputation points

2024-10-09T03:02:51.9633333+00:00

I have the same issue.
Gray Yeung 0 Reputation points

2024-10-09T03:03:33.0533333+00:00

@Navya

Do you have any idea?
I faced the same issue.

Share via

How to enable id token encryption in JWT token while using v2 endpoint?

Your answer