In the /beta endpoint, the profilePhoto resource was expanded to include both Exchange and AAD.Ī profile photo of a user, group or an Outlook contact accessed from Exchange Online or Azure Active Directory (AAD). As such, users that don't have a mailbox provisioned in Exchange Online will not have a profilePhoto available.Ī profile photo of a user, group or an Outlook contact accessed from Exchange Online. Microsoft Graph v1.0 retrieves the user's profilePhoto from Exchange Online, not Azure Active Directory. The Graph API has had weakenesses in this area that have not been addressed for years, despite assurances.įor this reason I suspect MS Identity Platform is going the same way as Azure Devops, years of development and promise, but ultimately never delivering a complete useful product.
Which makes no sense at all, is not documentated, and seems like a bug. The effect of this is that you can get the profile picture for a private MS account via a multi-tenant application but not via a single tenant application. The Graph beta API appears to work differently depending on whether the access token is retrieved for a single-tenant or multi-tenant application as described here Looking at the request in the Graph Explorer and browser devtools there's nothing obviously different from the request being made by the Graph Explorer and the one I'm making from Javascript, but the call from Javascript just isn't working.Īlso a call to from my Javascript does work, which suggests that I'm doing nothing wrong my end. In the Graph Explorer the endpoint $value correctly returns my account's profile image, but the same request from Javascript returns 404. So with that in mind I tested it using the Graph Explorer. So after wading through more documentation I learned that only the beta graph api works to return the photo of a personal acount, and it only works on the data endpoint ($value) not the metadata endpoint. So how do I get the profile picture of a basic Microsoft account? The User account in the Azure portal shows no profile picture in the User's details in the Directory - Users view, although when logged into Azure using that account the profile picture does appear in the Azure portal nav bar. The account is a Hotmail account, I don't know whether this makes it a 365 account or not. However the Microsoft login page that appears during the login redirect does show the user's account profile picture, which also appears if that account is used to log into the Graph explorer. I can get their name and basic profile info using '' but attempting to get their profile picture using '' or '' returns 404
I'm using the MS Graph API in a web page to get the information of a user logged in to an application using a Microsoft account linked to an Azure AD directory user.
0 kommentar(er)
