CODEWITHSUNDEEP
azureasp.net-web-apiazure-active-directory
Chandra sekhar
Chandra sekhar

Reputation: 406

Can we use Id token to access webapi

I am totally confused with id token and access token. I saw in many articles saying access token can be used to call webapi but can we use id token aswell to call and authenticate webapi

Upvotes: 1

Views: 356

Answers (1)

SunnySun
SunnySun

Reputation: 1935

You should not use id token to access a protected Web API.

ID Tokens should be used to get information about a user - it should not be used for authorization in place of an access token.

Access tokens enable clients to securely call APIs protected by Azure.

Note that Access tokens are signed (and might get encrypted), whereas ID tokens are not.

Upvotes: 2

Related Questions