The authentication service that returns the tokens sets the expiration. This is usually configurable. For Access tokens have a short lifespan. Refresh have longer. You can use the refresh token to get a new access token when it has expired. With Entra Id, the typical defaults are 1 hour for access, and 90 days for refresh.
Expiration time for the following Entra ID tokens: identity, access and refresh tokens
Mihai Cristian-Gabriel
0
Reputation points
Good afternoon,
We are using msal library in an xamarin mobile application. It's not clear the expiration period of the id, access and refresh tokens. How we can keep the refresh token valid for longer than 12 hours ? Do we need to generate a new access token, periodically with the refresh token ?
Regards,
Gabriel
Developer technologies | C#
11,583 questions
1 answer
Sort by: Most helpful
-
Bruce (SqlWork.com) 78,311 Reputation points Volunteer Moderator
2025-05-14T15:31:59.3233333+00:00