primary refresh token

The primary refresh token (PRT) is a [jwt] that is issued by the Azure AD authentication service to Microsoft token brokers on Windows, iOS, Android.

The contents are not visible to client components.

The PRT contains the [deviceid] and a [sessionkey].