MODIFIED docs/identity-platform/v2-protocols-oidc.md

Modified by Dickson Mwendia on Jul 3, 2026 1:41 PM
📖 View on learn.microsoft.com

+2 / -2 lines changed

Commit: Update ID tokens app manifest property

Changes:

Before

After

1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`.
1. Under **Implicit grant and hybrid flows**, select the **ID tokens (used for implicit and hybrid flows)** checkbox.
 
Or:
 
1. Select **Entra ID** > **App registrations** > *\<your application\>* > **Manifest**.
1. Set `oauth2AllowIdTokenImplicitFlow` to `true` in the app registration's [application manifest](reference-app-manifest.md).
 
If ID tokens aren't enabled for your app and one is requested, the Microsoft identity platform returns an `unsupported_response` error similar to:
 

1. Under Redirect URIs, add the redirect URI of your application. For example, `https://localhost:8080/`.
1. Under **Implicit grant and hybrid flows**, select the **ID tokens (used for implicit and hybrid flows)** checkbox.
 
Or, in the Microsoft Graph app manifest:
 
1. Select **Entra ID** > **App registrations** > *\<your application\>* > **Manifest**.
1. Set `enableIdTokenIssuance` to `true` within the `implicitGrantSettings` property of the `web` attribute.
 
If ID tokens aren't enabled for your app and one is requested, the Microsoft identity platform returns an `unsupported_response` error similar to:
 

MODIFIED docs/identity-platform/azure-active-directory-graph-app-manifest-deprecation.md

Modified by Dickson Mwendia on Jul 3, 2026 1:41 PM
📖 View on learn.microsoft.com

+1 / -1 lines changed

Commit: Update ID tokens app manifest property

Changes:

Before

After

| `logoUrl` | Relocated as a property of the `info` attribute |
| `logoutUrl` | Relocated as property `logoutUrl` of the `web` attribute |
| `name` | `displayName` |
| `oauth2AllowIdTokenImplicitFlow` | Relocated and renamed as property `enableAccessTokenIssuance` of property `enableIdTokenIssuance` in the `web` attribute |
| `oauth2AllowImplicitFlow` | Relocated and renamed as property `enableAccessTokenIssuance` of property `implicitGrantSettings`  in the `web` attribute |
| `oauth2Permissions` | Relocated and renamed as `oauth2PermissionScopes` property of the `api` attribute |
| `preAuthorizedApplications` | Relocated as `preAuthorizedApplications` property of the `api` attribute |

| `logoUrl` | Relocated as a property of the `info` attribute |
| `logoutUrl` | Relocated as property `logoutUrl` of the `web` attribute |
| `name` | `displayName` |
| `oauth2AllowIdTokenImplicitFlow` | Relocated and renamed as property `enableIdTokenIssuance` of the `implicitGrantSettings` property in the `web` attribute |
| `oauth2AllowImplicitFlow` | Relocated and renamed as property `enableAccessTokenIssuance` of property `implicitGrantSettings`  in the `web` attribute |
| `oauth2Permissions` | Relocated and renamed as `oauth2PermissionScopes` property of the `api` attribute |
| `preAuthorizedApplications` | Relocated as `preAuthorizedApplications` property of the `api` attribute |

MODIFIED docs/identity-platform/reference-app-manifest.md

Modified by Dickson Mwendia on Jul 3, 2026 1:41 PM
📖 View on learn.microsoft.com

+2 / -0 lines changed

Commit: Update ID tokens app manifest property

Changes:

Before

After

 
Specifies whether this web app can request OAuth2.0 implicit flow ID tokens. The default is false. This flag is used for browser-based apps, like JavaScript single-page apps. We, however, discourage the use of implicit grant even in SPAs and recommend using the [authorization code flow](./v2-oauth2-auth-code-flow.md) with PKCE.
 
Example:
 
```json

 
Specifies whether this web app can request OAuth2.0 implicit flow ID tokens. The default is false. This flag is used for browser-based apps, like JavaScript single-page apps. We, however, discourage the use of implicit grant even in SPAs and recommend using the [authorization code flow](./v2-oauth2-auth-code-flow.md) with PKCE.
 
In the Microsoft Graph app manifest, this attribute is replaced by the `enableIdTokenIssuance` property of the `implicitGrantSettings` property in the `web` attribute.
 
Example:
 
```json

📋 Microsoft Entra Documentation Changes

📊 Summary

📝 Modified Documentation Files