title: Azure AD returns Authentication_ExpiredToken on valid access token
body: <p>I'm getting <code>Your access token has expired. Please renew it before submitting the request.</code> when I call <code>https://graph.windows.net/myorganization/oauth2PermissionGrants?api-version=1.5</code> endpoint.</p>
  
  <p>To prevent any stupid questions - Yes, I know that using <code>Microsoft Graph</code> is recommended instead of <code>Azure AD Graph</code>. I'm aware of it and I'm using it. But for my current case I need to request exactly <code>Azure AD Graph</code>.</p>
  
  <p>Tests case:</p>
  
  <ol>
  <li>I successfully login on <code>https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=....</code> and get <code>code</code> in the response.</li>
  <li>I successfully exchange <code>code</code> and get <code>access_token</code> on <code>https://login.microsoftonline.com/common/oauth2/v2.0/token</code>.</li>
  <li>I successfully make requests to any <code>Microsoft Graph</code> endpoint (ie <code>https://graph.microsoft.com/education/me/classes</code>).</li>
  <li>I call <code>https://graph.windows.net/myorganization/oauth2PermissionGrants?api-version=1.5</code>.</li>
  <li>I get the error <code>Authentication_ExpiredToken</code> <code>Your access token has expired. Please renew it before submitting the request.</code></li>
  <li>I successfully make requests to any <code>Microsoft Graph</code> endpoint, so the <code>access_token</code> is valid.</li>
  </ol>
  
  <p>Based on this article: <a href="https://docs.microsoft.com/azure/active-directory/develop/active-directory-appmodel-v2-overview" rel="noreferrer">https://docs.microsoft.com/azure/active-directory/develop/active-directory-appmodel-v2-overview</a>, I can use this access token to access both <code>Microsoft Graph API</code> as well as <code>Azure AD Graph API</code>.</p>
  
  <p>So, I'm using v2.0 which should work for those: <a href="https://docs.microsoft.com/azure/active-directory/develop/active-directory-protocols-oauth-code" rel="noreferrer">https://docs.microsoft.com/azure/active-directory/develop/active-directory-protocols-oauth-code</a>.</p>
  
  <p>What I'm doing wrong?</p>
  
  <p>Thank you!</p>