From 2208012c75653e56a312d06e029901464601cf73 Mon Sep 17 00:00:00 2001 From: Den Delimarsky <53200638+localden@users.noreply.github.com> Date: Fri, 8 Nov 2024 10:02:10 -0800 Subject: [PATCH] Update msal-dotnet-articles/acquiring-tokens/web-apps-apis/on-behalf-of-flow.md --- .../acquiring-tokens/web-apps-apis/on-behalf-of-flow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/msal-dotnet-articles/acquiring-tokens/web-apps-apis/on-behalf-of-flow.md b/msal-dotnet-articles/acquiring-tokens/web-apps-apis/on-behalf-of-flow.md index 6abb5d14..c99b6933 100644 --- a/msal-dotnet-articles/acquiring-tokens/web-apps-apis/on-behalf-of-flow.md +++ b/msal-dotnet-articles/acquiring-tokens/web-apps-apis/on-behalf-of-flow.md @@ -184,7 +184,7 @@ If you are updating MSAL.NET to 4.51.0+, there is a chance that `InitiateLongRun - Web APIs expose scopes. For more information, see [Quickstart: Configure an application to expose web APIs (Preview)](/azure/active-directory/develop/quickstart-configure-app-expose-web-apis). -- Web APIs decide which version of the token they want to accept. For your own web API, you can change the property in the manifest named `accessTokenAcceptedVersion` (to 1 or 2). If in doubt, choose version 2. For more information, see [Microsoft Entra app manifest](/azure/active-directory/develop/reference-app-manifest). +- Web APIs decide which version of the token they want to accept. For your own web API, you can change the property in the manifest named `accessTokenAcceptedVersion` (to `1` or `2`). Unless you explicitly know that you need version `1`, always choose `2`. For more information, see [Microsoft Entra app manifest](/entra/identity-platform/reference-app-manifest). ## Practical usage of OBO in an ASP.NET / ASP.NET Core application