How to check connectivity to token endpoints programmatically ?

Question

How to check connectivity to token endpoints programmatically ?

Himan Jo 1

Hello team,

How can the app running on Android confirm if the Azure AD app / token endpoint, etc. is reachable ?

The app needs to check if it can communicate with the Azure AD app or other azure services before making a call to it. Is there a functionality like ping or something similar which can be used to confirm the connectivity ? Is there a MS Graph API to achieve this ?

The app needs to check for connectivity status continuously so authenticating user or the like wouldn't be an ideal approach.

Thank you in advance.

1 answer

Your answer

Answer 1

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Moderator

Hello himanjo-2471, Azure AD identity endpoints are guaranteed to be available 99.99% of the time, however if you want to ensure the endpoints are reachable from your network you can send a OPTIONS HTTP request to the OpenID Connect discovery document https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration and optionally to the endpoints listed in it (You need to execute a GET request) like the token endpoint https://login.microsoftonline.com/common/oauth2/v2.0/token.

If you want to ping tenant specifc endpoints just replace the common part with the tenant id or name. Eg: https://login.microsoftonline.com/<TENANT ID OR NAME EG. MYTENANT.ONMICROSOFT.COM>/v2.0/.well-known/openid-configuration

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.

Himan Jo 1 Reputation point

2022-05-25T15:30:55.84+00:00

Thank you for your response alfredorevilla-msft. Just need to clarify the following -

So if the OPTIONS HTTP request is done to the link mentioned above https://login.microsoftonline.com/..../openid-configuration and if the response received is HTTP_OK then it can be used to determine/confirm that the other OAuth 2.0 endpoints are reachable, right ?

Also if the above request is made continuously from a service it won't affect the response or the requests won't be blocked after a certain number of attempts right ? I mean there is no restriction on the number of times this rest API can be called in a particular time frame, is that correct ?

Thank you in advance for your assistance.
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator

2022-06-02T04:09:49.257+00:00

Hello @Himan Jo , if you want to ensure each one of the identity endpoints is available then make a GET request to https://login.microsoftonline.com/<TENANT>/v2.0/.well-known/openid-configuration to obtain them and then do an OPTIONS request for/to each one. There's no hard restriction however multiple continuous requests may get throttled. Please take a look to Throttling and service limits to consider for testing for more information.

Share via

How to check connectivity to token endpoints programmatically ?

1 answer

Your answer