Forum Discussion

yoelh's avatar
yoelh
Icon for Microsoft rankMicrosoft
Mar 17, 2023

Azure AD B2C authorization code and refresh token size increase update

Update September 11, 2023: This post is irrelevant anymore   As part of ongoing security improvement efforts in Azure Active Directory (AAD), part of Microsoft Entra, Azure AD B2C will be rolling...
Azure AD B2C
mless340's avatar
mless340
Copper Contributor
Apr 20, 2023
Why was this not communicated in advance and in a better place than this hard to find blog post?? This broke all our apps for all users out of nowhere. Can MS please offer additional information about this? This is an auth code, not an access token, why does it have to be this huge?
  • stijnsymons's avatar
    stijnsymons
    Copper Contributor
    Apr 20, 2023

    mless340 we opened a support ticket, got confirmation that MS is rolling back customers - we're now waiting on a confirmation so our users can log in again

      • paulvancoller-appsure's avatar
        paulvancoller-appsure
        Copper Contributor
        Apr 24, 2023
        It appears it has been rolled back, with the AuthCode now at around 900 characters.

Resources