Blog Post

Azure PaaS Blog
6 MIN READ

API Management Policy for Access Token Acquisition, Caching and Renewal

willzhan's avatar
willzhan
Icon for Microsoft rankMicrosoft
Mar 08, 2021
Co-authors (alphabetical order): Dan Balma, Maarten Van De Bospoort, Vishnu Naga Praveen Deepthimahanthi, Nick Drouin, Kreig DuBose, David Giard, Michael Green, Binay Kumar, Hao Luo, Shubhaangi Mah...
Updated Apr 18, 2021
Version 3.0
azure api management
willzhan's avatar
willzhan
Icon for Microsoft rankMicrosoft
Feb 10, 2022

For the two protected APIs behind API Management, you can enable client_credentials flow for API authorization (not authorization code flow with PKCE). The API Management policy can just get access token of a backend API, similarly as in this article.