I am getting the error below when attempting to validate a token on Postman. The access token is generated with my android app against a registered app on Azure. This has been working for more than a year and stopped a few days ago.
"error": { "code": "ErrorInsufficientPermissionsInAccessToken", "message": "Exception of type 'Microsoft.Fast.Profile.Core.Exception.ProfileAccessDeniedException' was thrown.", "innerError": { "date": "", "request-id": "", "client-request-id": "" } }
Tested in my environment working fine for me, using delegated permissions for the below API call as showing im image.
Permission which i have given to generate the token
The same kind of problem has raised last year on Mircosoft Q&A where multiple users were facing same kind of problem later it got fixed by micrsoft. would suggest you try to check if you are not missing any permissions that causing this error else you can directly raise the same question or follow up on same Mircosoft Q&A question.
Add User.Read to the scope parameter in the authentication redirection URL.
We had the same problem. We were using openid email profile for the scope. We have switched to openid email profile User.Read and now it works.
Reference: Microsoft docs
