How to get token from MS identity without passing a scope

Gagandeep Singh 0 Reputation points
2025-03-06T23:47:16.88+00:00

I'm trying to secure Azure functions with easy authentication. .V1 version of MS identity gives us the ability to request token without providing the scope or resource but it sets the aud claim to GUID : 00000002-0000-0000-c000-000000000000 (which i believe is the default GUID for Entra id)

I'm trying to understand the implications if I add this GUID to the allowed audience of function app. For context request is being made from a SAAS application that does not send scope while getting token from provider.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,564 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.