Getting "00000003-0000-0000-c000-000000000000" Audience in Access token which was expected to be "https://graph.microsoft.com"

[Manohar1822]

Target SharePoint environment

SharePoint Online

What SharePoint development model, framework, SDK or API is this about?

💥 SharePoint Framework

Developer environment

Windows

What browser(s) / client(s) have you tested

• 💥 Internet Explorer
• 💥 Microsoft Edge
• 💥 Google Chrome
• 💥 FireFox
• 💥 Safari
• mobile (iOS/iPadOS)
• mobile (Android)
• not applicable
• other (enter in the "Additional environment details" area below)

Additional environment details

• browser version - Google Chrome (Version 129.0.6668.90 (Official Build) (64-bit)), Microsoft Edge (Version 129.0.2792.65 (Official build) (64-bit))
• SPFx version - 1.17.0
• Node.js version - 16.19.0

Describe the bug / error

I am encountering an issue while trying to acquire an access token using the SharePoint Online API. The expected audience for the token is 'https://graph.microsoft.com', but I am receiving token '00000003-0000-0000-c000-000000000000' instead.

Request Configuration: - Path: /sites/14thAugTestPublicTeam/_api/Microsoft.SharePoint.Internal.ClientSideComponent.Token.AcquireOBOToken?resource=%27https://graph.microsoft.com%27&clientId=<client_id>

Response: json { "odata.metadata": "https://DOMAIN.sharepoint.com/sites/SITE_NAME/_api/$metadata#Edm.String", "value": "{ "AccessToken": <access token with audience '00000003-0000-0000-c000-000000000000' instead of 'https://graph.microsoft.com'> }" } Expected Result: The audience should be 'https://graph.microsoft.com'. Additional Information: The same code and configuration work correctly in a one of our SharePoint Online tenants, returning the expected audience. while in 3-4 other tenants we are seeing this issue. Could you please help me understand why the audience is returning as 00000003-0000-0000-c000-000000000000 instead of https://graph.microsoft.com/? Any guidance or troubleshooting steps would be greatly appreciated.

We were expecting 'https://graph.microsoft.com' in audience but started seeing 00000003-0000-0000-c000-000000000000 instead from last couple of days. without any change from our end.

Steps to reproduce

1. Get access token for 'https://graph.microsoft.com' as audience
2. Check access token returned

Expected behavior

Audience in access token should be: 'https://graph.microsoft.com'