Microsoft Entra registered and joined devices hold this token, which gives users seamless single sign-on to apps integrated with Entra.
Also called PRT, PRT.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Primary Refresh Token in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra registration
The model used for personal (BYOD) devices. Registering gives the device an identity in Microsoft Entra, letting its owner use company resources while continuing to sign in with their own personal account.
- Token
The unit of text an LLM works with, which may be a word, part of a word or punctuation. Billing, limits and context windows are all counted in these units.
- Seamless single sign-on
A Microsoft Entra capability, included at no extra cost, that signs people in without a password prompt when they use domain-joined company devices on the company network. It pairs with password hash sync or pass-through authentication; AD FS is not supported.
Related terms
- Cloud TGT
Issued by Microsoft Entra ID alongside the PRT when someone signs in to Windows, this ticket for the KERBEROS.MICROSOFTONLINE.COM realm lets a device request service tickets for cloud resources like Azure Files with no domain controller involved.