0
votes

I have configured Azure AD as relying party with ADFS . I am able to get SAMl assertion from ADFS after hitting to ADFS endpoint . But when am trying to get access token using same SAML assertion , it is giving bad request. I couldn't find any official documentation for such API request , there is just SAMl assertion document which doesn't clearly mentions or describes required parameters to be in request. Following request format am using , Endpoint : https://login.microsoftonline.com//oauth2/v2.0/token Header : Content-Type : application/x-www-form-urlencoded Body : grant_type : urn:ietf:params:oauth:grant-type:saml1-bearer scope : https://graph.microsoft.com/.default client_id : XXXXXXXX client_secret : XXXXXX assertion : Base64 encoded complet SAML assertion received from ADFS including

I am not getting what am missing here ?

1

1 Answers

1
votes

It seems that the grant_type is not correct.

It should be grant_type : urn:ietf:params:oauth:grant-type:saml1_1-bearer.

Please have a retry with it.