Getting "00000003-0000-0000-c000-000000000000" Audience in Access token which was expected to be "https://graph.microsoft.com"

Question

Getting "00000003-0000-0000-c000-000000000000" Audience in Access token which was expected to be "https://graph.microsoft.com"

Sagar K 20

I am encountering an issue while trying to acquire an access token using the SharePoint Online API. The expected audience for the token is 'https://graph.microsoft.com', but I am receiving token '00000003-0000-0000-c000-000000000000' instead.

Request Configuration: - Path: /sites/14thAugTestPublicTeam/_api/Microsoft.SharePoint.Internal.ClientSideComponent.Token.AcquireOBOToken?resource=%27https://graph.microsoft.com%27&clientId=

2 answers

Your answer

Answer 1

Rohit Raghuwanshi - MSFT 625 Microsoft External Staff

Hello Sagar K,

Thank you for reaching out, Microsoft!

The Id 00000003-0000-0000-c000-000000000000 you are receiving is AppId for Microsoft Graph application only which is expected resource for your request. You can verify this on the below mentioned documentation.

https://video2.skills-academy.com/en-us/troubleshoot/azure/entra/entra-id/governance/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications

User's image

If my answer is helpful to this question, please remember to "Accept as answer" to close this case and this will help people in this forum who have similar questions to yours find the answer easier.

Sagar K 20 Reputation points

2024-10-04T12:55:42.56+00:00

Hi Rohit,

Thank you for your response.

I wanted to clarify that the change we're observing has been consistent with multiple setup where we've experienced issues over the past few days. Previously, we noticed the audience of the JWT included https://graph.microsoft.com.

In contrast, on one of our other tenant/setup, we do not see this ID in the audience of the JWT token; instead, we are seeing https://graph.microsoft.com.
Sagar K 20 Reputation points

2024-10-07T10:05:02.42+00:00

Hi Rohit,

We have noticed a recent change where the audience in our Graph tokens is showing the ID 00000003-0000-0000-c000-000000000000. Previously (a couple of week ago), we used to receive the URL https://graph.microsoft.com in the audience field.

Could you please confirm if this is an intentional change or if there has been any recent update that might explain this behavior?
M. R. Chaturvedi 0 Reputation points

2024-10-11T07:08:27.0633333+00:00

Hi @Rohit Raghuwanshi - MSFT ,

I recently encountered a similar issue with one of my tenants. Recently, the audience was changed and displayed as "00000003-0000-0000-c000-000000000000," whereas it has now reverted again to "https://graph.microsoft.com." This change occurred on October 8th (IST) and is consistent across all tenants.

I would like to inquire whether there has been any rollback or other modifications from Microsoft's end. A prompt response would be greatly appreciated, as this matter is critical to the functionality of our application.

Thank you for your attention to this issue.
Rohit Raghuwanshi - MSFT 625 Reputation points Microsoft External Staff

2024-10-11T07:14:46.5766667+00:00

Hi M. R. Chaturvedi, Sagar K

As per my understanding both Id and URL refers to same aud. Please raise a ticket with Microsoft Graph support, if need you further assistance and troubleshooting.

Answer 2

Hi @Rohit Raghuwanshi - MSFT ,
I recently encountered a similar issue with one of my tenants. Recently, the audience was changed and displayed as "00000003-0000-0000-c000-000000000000," whereas it has now reverted again to "https://graph.microsoft.com." This change occurred on October 8th (IST) and is consistent across all tenants.

I would like to inquire whether there has been any rollback or other modifications from Microsoft's end. A prompt response would be greatly appreciated, as this matter is critical to the functionality of our application.

Thank you for your attention to this issue.

Share via

Getting "00000003-0000-0000-c000-000000000000" Audience in Access token which was expected to be "https://graph.microsoft.com"

2 answers

Your answer