What's the difference between graph.windows.net and graph.microsoft.com?

Question

I'm trying to access the users thumbnail photo with https://graph.windows.net/{teantId}/users/[email protected]/thumbnailPhoto?api-version=1.6 (from this question). I find nowhere in the graph api docs anything about graph.windows.net, but they tell me to go to https://graph.microsoft.com/v1.0/me/photo/ (This page). Can anyone tell me the difference between the two api's? The latter gives me "invalid audience" when I try to access it, so clearly there's a difference.

Answer 1

I've found out. graph.windows.net is the Azure AD graph, and graph.microsoft.com is the Microsoft graph. I'm trying to access the Azure AD graph, so I want to us graph.windows.net. That explains why my token had an invalid audience for graph.microsoft.com.