Editorial question22.2K views1,406 votes0 answers2,605 following
AI-generatedAzure AD service principal token persists after client credential expiry
When a service principal's client credential expires, previously issued access tokens remain valid until their own intrinsic expiry, typically 60–90 minutes, because Azure AD token validation does not re-check credential status after issuance. This means the token's granted roles and permissions are fixed for its lifetime and do not reflect subsequent role r
azure