Microsoft Entra IDV2 Protocols Oidc
In brief
1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`.
Documentation change
- Under Redirect URIs, add the redirect URI of your application. For example,
https://localhost:8080/. - Under Implicit grant and hybrid flows, select the ID tokens (used for implicit and hybrid flows) checkbox.
Or:
Or, in the Microsoft Graph app manifest:
- Select Entra ID > App registrations > <your application> > Manifest.
- Set
oauth2AllowIdTokenImplicitFlowtotruein the app registration's application manifest.
- Set
enableIdTokenIssuancetotruewithin theimplicitGrantSettingsproperty of thewebattribute.
If ID tokens aren't enabled for your app and one is requested, the Microsoft identity platform returns an unsupported_response error similar to:
diff --git a/docs/identity-platform/v2-protocols-oidc.md b/docs/identity-platform/v2-protocols-oidc.md index 53ab574bd96..64d9d9edfc8 100644 --- a/docs/identity-platform/v2-protocols-oidc.md +++ b/docs/identity-platform/v2-protocols-oidc.md @@ -54,10 +54,10 @@ ID tokens aren't issued by default for an application registered with the Micros 1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`. 1. Under **Implicit grant and hybrid flows**, select the **ID tokens (used for implicit and hybrid flows)** checkbox. -Or: +Or, in the Microsoft Graph app manifest: 1. Select **Entra ID** > **App registrations** > *\<your application\>* > **Manifest**. -1. Set `oauth2AllowIdTokenImplicitFlow` to `true` in the app registration's [application manifest](reference-app-manifest.md). +1. Set `enableIdTokenIssuance` to `true` within the `implicitGrantSettings` property of the `web` attribute. If ID tokens aren't enabled for your app and one is requested, the Microsoft identity platform returns an `unsupported_response` error similar to: