Azure access token generation from Postman

Question

I wanted to generate Azure token from Postman for API authorization in my project. I am able to generate token using below API request but getting the below error message "Authorization denied for this request" while using the generated token in another API request.

Endpoint#

https://login.microsoftonline.com/:tenant_id/oauth2/token

Params#

tenant_id:As per id generation by azure.

Body# (Form-data)

grant_type:client_credentials
client_id:As per id generation by azure.
client_secret:As per id generation by azure.
resource:Required URL

Response#

    "token_type": "Bearer",
    "expires_in": "foo",
    "ext_expires_in": "foo",
    "expires_on": "foo",
    "not_before": "foo",
    "resource": "foo",
    "access_token":foo

Since the above returned token is not accepted, I had passed username and password as well in body of the request but ended up with same results. Also azure did not consider my credentials even they are wrong.

Could you please assist what else I need to send in the response to get valid token id?

See the updated answer and do exactly I have shown. You will get token definitely. Let me know if you have any more concern — Md Farid Uddin Kiron
I applied as per your direction and getting token successfully but problem is generated token is not accepted as valid token when passed in another API for authentication purpose. — Learner
Where are you passing this ? which resource you are trying to access? show the URL — Md Farid Uddin Kiron
POST>>>login.microsoftonline.com/<<My tenant name>>.microsoft.com/oauth2/token. sending these inbody(Grant type, clientid, client_secret and resource) — Learner
This is token endpoint , after getting token where do you passing it? not this URL — Md Farid Uddin Kiron

Md Farid Uddin Kiron Md Farid Uddin Kiron · Accepted Answer · 2019-07-09T14:14:38

The Valid format for client_credentials authentication flow is like below:

Azure Portal Credentials For App Id and Tenant Id:

Application Secret from Portal:

Token Endpoint Or URL:

https://login.microsoftonline.com/YourTenantName.onmicrosoft.com/oauth2/token

Request Param:

grant_type:client_credentials
client_id:b603c7be_Your_App_ID_e6921e61f925
client_secret:Vxf1Sl_Your_App_Secret_2XDSeZ8wL/Yp8ns4sc=
resource:https://graph.microsoft.com

PostMan Sample:

Token On Response:

Expose Your Own API:

When You want to authorize your own API you have add it here. So that your token will contain this permission and this API can be accessed. Refer this docs

For more clarity you could refer official docs

Azure access token generation from Postman

2 Answers