I want to login to access dynamics 365 CRM but the condition is when I login with https://login.microsoftonline.com/common/oauth2/authorize?resource=crmapiurl&client_id&response_type=code&redirect_uri&response_mode=query, I can access the crm but not getting refresh_token when login. I can get access_token & refresh_token if I login with https://login.microsoftonline.com/common/oauth2/v2.0/authorize?scope=crmapiurl/user_impersonation offline_access&client_id&response_type=code&redirect_uri&response_mode=query, but I dont know why I cant access the CRM and getting error 401 Unauthorized. What url should I use to get access_token & refresh_token and the token can use to access the dynamics 365 CRM?
The first URL is for the OAuth 2.0 authorize endpoint for Azure Active Directory, with the "resource" parameter set to "crmapiurl". This is used to request an access token for the specified resource.
The second URL is also for the OAuth 2.0 authorize endpoint for Azure Active Directory, with the "scope" parameter set to "crmapiurl/user_impersonation". This is used to request an access token for the specified scope which allows the application to impersonate the signed-in user when making requests to the "crmapiurl" resource on behalf of the user.
In summary, the first URL is for the general resource access while the second URL is for user impersonation access to the same resource.
If I answer your question then please mark it as verified.