diff --git a/TokenTactics.psm1 b/TokenTactics.psm1
index 6f769c6..3f11d7c 100644
--- a/TokenTactics.psm1
+++ b/TokenTactics.psm1
@@ -43,6 +43,7 @@ $functions=@(
     "Invoke-RefreshToDODMSGraphToken"
     "Invoke-RefreshToO365SuiteUXToken"
     "Invoke-RefreshToYammerToken"
+    "Invoke-RefreshToSharepointOnlineToken"
     "Invoke-ClearToken"
     # CapBypass.ps1
     "Invoke-ForgeUserAgent"
diff --git a/modules/TokenHandler.ps1 b/modules/TokenHandler.ps1
index dde860d..bb3bb3a 100644
--- a/modules/TokenHandler.ps1
+++ b/modules/TokenHandler.ps1
@@ -993,6 +993,66 @@ function Invoke-RefreshToDODMSGraphToken {
     $global:DODMSGraphToken = Invoke-RestMethod -UseBasicParsing -Method Post -Uri "$($authUrl)/oauth2/token?api-version=1.0" -Headers $Headers -Body $body
     Write-Output $DODMSGraphToken
 }
+function Invoke-RefreshToSharepointOnlineToken {
+    <#
+    .DESCRIPTION
+        Generate a Microsoft Sharepoint Online token from a refresh token.
+    .EXAMPLE
+        Invoke-RefreshToSharepointOnlineToken -domain myclient.org -spoDomain myclient.sharepoint.com -refreshToken ey....
+        $SPOToken.access_token
+    #>
+    [cmdletbinding()]
+    Param(
+        [Parameter(Mandatory=$true)]
+        [string]$domain,
+        [Parameter(Mandatory=$true)]
+        [string]$spoDomain,
+        [Parameter(Mandatory=$false)]
+        [string]$refreshToken = $response.refresh_token,
+        [Parameter(Mandatory=$false)]
+        [string]$ClientID = "ab9b8c07-8f02-4f72-87fa-80105867a763",
+        [Parameter(Mandatory=$False)]
+        [ValidateSet('Mac','Windows','AndroidMobile','iPhone')]
+        [String]$Device,
+        [Parameter(Mandatory=$False)]
+        [ValidateSet('Android','IE','Chrome','Firefox','Edge','Safari')]
+        [String]$Browser
+    )
+    if ($Device) {
+		if ($Browser) {
+			$UserAgent = Invoke-ForgeUserAgent -Device $Device -Browser $Browser
+		}
+		else {
+			$UserAgent = Invoke-ForgeUserAgent -Device $Device
+		}
+	}
+	else {
+	   if ($Browser) {
+			$UserAgent = Invoke-ForgeUserAgent -Browser $Browser 
+	   } 
+	   else {
+			$UserAgent = Invoke-ForgeUserAgent
+	   }
+	}    
+    $Headers=@{}
+    $Headers["User-Agent"] = $UserAgent
+
+    $Resource = "https://$($spoDomain)/"
+    $TenantId = Get-TenantID -domain $domain
+    $authUrl = "https://login.microsoftonline.com/$($TenantId)"
+    $global:refreshToken = $response.refresh_token
+    Write-Output $refreshToken
+    $body2 = @{
+        "resource" =      $Resource
+        "client_id" =     $ClientId
+        "grant_type" =    "refresh_token"
+        "refresh_token" = $refreshToken
+        "scope"=         "openid"
+    }
+    
+    $global:SPOToken = Invoke-RestMethod -UseBasicParsing -Method Post -Uri "$($authUrl)/oauth2/token?api-version=1.0" -Headers $Headers -Body $body2
+    Write-Output $SPOToken
+}
 function Invoke-ClearToken {
     <#
     .DESCRIPTION