How do I get Bearer (Access) Token in v2 format using @azure/msal-react?

Core Library

MSAL.js v2 (@azure/msal-browser)

Core Library Version

2.14.2

Wrapper Library

MSAL React (@azure/msal-react)

Wrapper Library Version

1.0.0

Description

I created a new app service and set accessTokenAcceptedVersion to 2 in manifest.json as I am looking for a v2 token similar to here. However the accessToken generated by Microsoft always has an iss value of sts.windows.net when decoded. I would like it to be login.microsoftonline.com. Please advice.

This is my implementation:

This is my token when decoded:

Please advice.

MSAL Configuration

No response

Relevant Code Snippets

let token;
msalInstance.acquireTokenSilent({
      ...loginRequest
    }).then((accessTokenResponse) => {
       // Acquire token silent success
       token = accessTokenResponse.accessToken;
     })

Identity Provider

Azure AD / MSA

Source

External (Customer)

[derisen]

@a2441918 cheers! Closing this. Let us know if you need further help.

[derisen]

@a2441918 every access token is meant for a resource, represented in the aud claim. To get a token for your backend API, you need to use the scope(s) that you expose in your access token request. Check out the docs for more on this.

And yes, it is best practice to create separate app registrations for your client and service apps. From the screenshots, the scopes you exposed doesn’t look right. Please check out this tutorial, which shows how do this properly.