| ACR Values Supported | |
| Authorization Endpoint | https://login.microsoftonline.com/common/oauth2/v2.0/authorize |
| Claim Types Supported | |
| Claims Locales Supported | |
| Claims Parameter Supported | |
| Claims Supported | sub iss cloud_instance_name cloud_instance_host_name cloud_graph_host_name msgraph_host aud exp iat auth_time acr nonce preferred_username name tid ver at_hash c_hash email |
| Code Challenge Methods Supported | |
| Device Authorization Endpoint | https://login.microsoftonline.com/common/oauth2/v2.0/devicecode |
| Display Values Supported | |
| Grant Types | |
| ID Token Encryption Alg Values Supported | |
| ID Token Encryption Enc Values Supported | |
| ID Token Signing Alg Values Supported | RS256 |
| Introspection Endpoint | |
| Issuer | https://login.microsoftonline.com/{tenantid}/v2.0 |
| JWKS URI | https://login.microsoftonline.com/common/discovery/v2.0/keys |
| Privacy Policy URI | |
| Registration Endpoint | |
| Request Object Encryption Alg Values Supported | |
| Request Object Encryption Enc Values Supported | |
| Request Object Signing Alg Values Supported | |
| Request Parameter Supported | |
| Request URI Parameter Supported | |
| Require Request URI Registration | |
| Response Modes Supported | query fragment form_post |
| Response Types Supported | code id_token code id_token id_token token |
| Revocation Endpoint | |
| Scopes Supported | openid profile email offline_access |
| Service Documentation | |
| Subject Types Supported | pairwise |
| Terms of Service URI | |
| Token Endpoint | https://login.microsoftonline.com/common/oauth2/v2.0/token |
| Token Endpoint Auth Methods Supported | client_secret_post private_key_jwt client_secret_basic |
| Token Endpoint Auth Signing Alg Values Supported | |
| UI Locales Supported | |
| Userinfo Encryption Alg Values Supported | |
| Userinfo Encryption Enc Values Supported | |
| Userinfo Endpoint | https://graph.microsoft.com/oidc/userinfo |
| Userinfo Signing Alg Values Supported |
Last checked at 2025-09-07 03:36:28.