Expiration time for the following Entra ID tokens: identity, access and refresh tokens

Mihai Cristian-Gabriel 0 Reputation points
2025-05-14T06:29:33.2466667+00:00

Good afternoon,

We are using msal library in an xamarin mobile application. It's not clear the expiration period of the id, access and refresh tokens. How we can keep the refresh token valid for longer than 12 hours ? Do we need to generate a new access token, periodically with the refresh token ?

Regards,

Gabriel

Developer technologies | C#
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Bruce (SqlWork.com) 78,311 Reputation points Volunteer Moderator
    2025-05-14T15:31:59.3233333+00:00

    The authentication service that returns the tokens sets the expiration. This is usually configurable. For Access tokens have a short lifespan. Refresh have longer. You can use the refresh token to get a new access token when it has expired. With Entra Id, the typical defaults are 1 hour for access, and 90 days for refresh.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.