Object ID Enumeration

REST API

Without delegated auth flow: https://graph.microsoft.com/v1.0/servicePrincipals(appId='$AppId')

With delegated auth flow: https://graph.microsoft.com/v1.0/me

Access Token

  • Decrypt the access token with JWT
  • Check the oid field