How do I get a Refresh_Token from a ADFS 3.0 end point in C# MVC?

Question

I have been securing a webapi using Rob Sander's instructions, found here: Securing a web api with adfs 3.0 and jwt tokens

I have successfully performed a login via ADFS using the usernamemixed end point, and have received the encoded Json Web Token (JWT). That's fine, and I can successfully validate the token with the X509 certificate found in the federation data xml found on the ADFS server.

I have implemented a DelegatingHandler so that any Authorize attributes added to methods will be checked.

The final piece of the puzzle is where I can get the refresh_token from. It would make sense to come from an ADFS endpoint, and I thought it would be in the response from the usernamemixed end point, but it doesn't appear to be there. Also, how do I make a call to request a new access_token if I provide a refresh_token?

Answer 1

Normally, there's another OAuth endpoint. You would have /authorize, /token and /refresh.

Not sure in ADFS 3.0 implements this?

You can get it via:

Set-AdfsRelyingPartyTrust -TargetName "RPT Name" -IssueOAuthRefreshTokensTo AllDevices

More details here .