Warren Parad (@wparad.bsky.social)

You now absolutely can get a UTI from @microsoft.com with every request! "The unique token identifier (UTI) is an unique identifier (GUID) embedded in every Microsoft Entra access token (AT)" The OAuth Spec already defines a "JTI" to do this exact thing. Remember to wash your hands.

loading . . .

Track and investigate identity activities with linkable identifiers in Microsoft Entra - Microsoft Entra ID Discover how linkable identifiers like session IDs and unique token identifiers in Microsoft Entra help track and investigate identity-related activities, enhancing security and transparency. https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-track-linkable-identifiers#unique-token-identifiers