MICMAS—Broker
ROADtools broker
IDENTITY AUTOMATION01

Turn a refresh token
into a PRT cookie.

Register an Entra ID device, request a Primary Refresh Token, and create an x-ms-RefreshTokenCredential cookie in one secure flow.

01Refresh token
02Device + PRT
03Browser cookie
INPUT / CREDENTIAL

Generate credential

Ephemeral session

◇

◈

Credentials stay on this server. Token material is processed in an isolated temporary workspace and is not stored by MICMAS-Broker.