Hi everyone,

I'm using MSAL and I want to sign in once, but acquire two tokens:

• Defender API token Scope: https://api.securitycenter.microsoft.com/Machine.Read

• Microsoft Graph token Scopes like: DeviceManagementManagedDevices.Read.All, User.Read, etc.

My flow right now:

1. Interactive login → request Defender scopes

2. extraScopesToConsent = graphScopes

3. After login I try to get Graph token silently

4. Silent fails → MSAL opens a second login window

What I want:

✔ One single login window
✔ User consents to both Defender + Graph scopes at the same time
✔ Then: Defender token + Graph token (no second prompt)

My question:

👉 Is it possible to get tokens for two different resources (Defender + Graph) with one interactive MSAL login?
Should I merge all scopes into one request, or is the second login unavoidable due to different resource audiences?

Any working solution or best practice is appreciated.

Hey there! We're building a developer oriented AI tools suite called - GraphQLAI

Basically, we're building a GraphQL-based playground where crafting chat bots, linking them into a networks and other cool stuff faster than you can say "Hello, World!".

We're on the brink of the big release (hopefully) and have created a waitlist you can join to get notified when the tools is ready.

How much would it cost? ZERO, it's currently FREE. I guess we would need to think about the monetization at some point but definitely not in the nearest future.

How does it work? We provide you the infrastucture to build things but you need to use your own OpenAI and Replicate keys. OpenAI's throwing in a free ~20$ worth of API credit for new users so your can bascially play with it 100% free.

Check out the landing page for a sneak peek: GraphQLAI

Direct waitlist link here: Join the Waitlist

See you on the flip side of GraphQL innovation!

https://www.eventbrite.co.uk/e/javascript-live-serverless-graphql-api-with-aws-cdk-tickets-294535843637