更改 Azure AD B2C 访问令牌生命周期不起作用

Question

I went to my Azure B2C → User flows (policies) → A flow of type "Sign up and sign in V2" → Properties → Token Lifetime.

There I changed the "Access & ID token lifetimes (minutes)" from 60 to 15. Then I saved. I emptied the cache and refreshed the page to make sure that the value was really modified.

Today, more than 24 hours later, all my access tokens still have a lifetime of 60 minutes. I don't get it. I got the access token directly from a brand new authorization code.

Should I wait longer? Is it a bug in Azure? Or did I do something wrong?

Answer 1

I didn't reproduce your issue on my side. There is no delay for this change to take effect. Make sure you are using the same application(clientId) to retrieve the access token.

Here are my test steps and results for your reference.

1.Set the token lifetime to 60 minutes.

Get access token by using auth code flow.

Get auth code.

https://tonyb2ctest.b2clogin.com/tonyb2ctest.onmicrosoft.com/oauth2/v2.0/authorize?p=B2C_1_testsignupin
&client_id=c3a6429c-01XXX-ae02-1579b3f3fa9c
&response_type=code
&redirect_uri=https://windowXXXsbowman.azurewebsites.net/.auth/login/aad/callback
&response_mode=query
&scope=https://tonyb2ctest.onmicrosoft.com/api/user_impersonation
&state=12345

Get access token

https://tonyb2ctest.b2clogin.com/tonyb2ctest.onmicrosoft.com/oauth2/v2.0/token?p=B2C_1_testsignupin

2.Set the token lifetime to 15 minutes.