Yeah I ran into the same problem.
The current rest sensor implementation doesnt support refreshtokens, so you’d have to create an azure app with the correct rights, get a proper AD role and go through all your organizational hoops (currently)
Something I havent tried.
We were discussing this here:
probably best to follow up in that topic.
I might take a look into implementing refresh tokens for the rest sensor, but honestly I’m not sure when I can make time