title: ADAL.js - Obtaining Microsoft Graph Access Token with id_token
body: <p>I am attempting to integrate Azure AD login and Graph API into my angular2 website.</p>
  
  <p>I have successfully implemented an ADAL login and redirect, built around a useful blog post <a href="https://blogs.msdn.microsoft.com/premier_developer/2017/04/26/using-adal-with-angular2/" rel="noreferrer">here</a></p>
  
  <p>From this I retrieved an id_token parameter that my adalservice can access. Currently this is acheived through a simple <code>context.login()</code> and catching the token in the redirect.</p>
  
  <p>When I use this token to try and access Microsoft Graph, I receive an <code>InvalidAuthenticationToken</code> response stating <code>Access Token validation failure</code>. </p>
  
  <p><a href="https://i.stack.imgur.com/kOry7.png" rel="noreferrer"><img src="https://i.stack.imgur.com/kOry7.png" alt="API call with obtained &quot;access_token&quot;"></a></p>
  
  <p>I'm new to this stuff, so it could be that my call is intrinsically wrong, or that I lack certain permissions in AD, or my app reg lacks permissions. I've seen that I potentially need to request an access token with sufficient scope, yet I can find any examples of this.</p>
  
  <p>Has anyone used this adalService library to obtain tokens for use with Graph API?</p>