title: Getting access tokens from Postman: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests
body: <p>We recently made a switch from Implicit Grant Flow to Authorization Code Flow with PKCE for our application, and now we're having some trouble getting access tokens from Azure AD from Postman. The app is registered in Azure AD and we're basically using the Postman procedure described here: <a href="https://developer.mypurecloud.com/api/rest/postman/index.html#enable_authorization" rel="noreferrer">https://developer.mypurecloud.com/api/rest/postman/index.html#enable_authorization</a>. Calling the <code>https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize</code> endpoint works ok, but it hits an error when calling <code>https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token</code>:</p>
  
  <pre><code>"Error: Cound not complete OAuth 2.0 token request: "AADSTS9002327: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests.\r\nTrace ID: 8253f622-3425-4d0a-817c-281f86097300\r\nCorrelation ID: 9d84460f-ec02-4ace-af03-14d948e3d4ad\r\nTimestamp: 2020-04-15 14:02:03Z"
  </code></pre>
  
  <p>This is the access token request:
  <a href="https://i.stack.imgur.com/ts4kU.png" rel="noreferrer"><img src="https://i.stack.imgur.com/ts4kU.png" alt="enter image description here"></a></p>
  
  <p>How can we get access tokens from Azure AD using Postman with this authorization flow?</p>