You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -1183,12 +1183,12 @@ We also recommend using a shared [Data Protection](xref:security/data-protection
1183
1183
1184
1184
## STS token version
1185
1185
1186
-
Therearetwotypesoftokenformats, namedVersion1 (V1) andVersion2 (V2). InAzure's security token services (STS), the V1 format uses the `sts.windows.net` domain as the issuer, while the V2 format uses the `login.microsoftonline.com` domain as issuer. V2 supports additional features, such as authenticating personal accounts and OpenID protocols.
1186
+
TherearetwotypesoftokenURIs, namedVersion1 (V1) andVersion2 (V2). InAzure's security token services (STS), the V1 endpoint uses the `sts.windows.net` domain as the issuer, while the V2 endpoint uses the `login.microsoftonline.com` domain as the issuer. V2 supports additional features, such as authenticating personal accounts and OpenID Connect (OIDC) protocols.
*TheSTSversionmustbechangedintheapps' registrations in the Azure portal. Set the value of `requestedAccessTokenVersion` to `2` in the apps'manifests, bothintheapp's registration and the web API's (`MinimalApiJwt`) registration.
1191
-
*UsetheV2authorityURLformat (example: `https://login.microsoftonline.com/{TENANT ID}/v2.0`, where the `{TENANT ID}` placeholder is the tenant ID).
1191
+
*UsetheV2authorityURLendpoint (example: `https://login.microsoftonline.com/{TENANT ID}/v2.0`, where the `{TENANT ID}` placeholder is the tenant ID).
0 commit comments