Object ID Enumeration
REST API
Without delegated auth flow:
https://graph.microsoft.com/v1.0/servicePrincipals(appId='$AppId')
With delegated auth flow:
https://graph.microsoft.com/v1.0/me
Access Token
- Decrypt the access token with JWT
- Check the
oidfield