Blog Post

FastTrack for Azure
7 MIN READ

Protecting APIs in Azure API Management using OAuth 2.0 Client Credential Flow & test using Postman

UmarMohamedUsman's avatar
UmarMohamedUsman
Icon for Microsoft rankMicrosoft
Jan 10, 2022
Challenge: I recently helped a customer setting up OAuth 2.0 with Azure AD to protect their API backend in Azure API Management. While this Azure Doc has overall process, it uses OAuth 2.0 authoriz...
Updated Jun 05, 2022
Version 12.0
App
sebdev142's avatar
sebdev142
Copper Contributor
Sep 18, 2022

HI! Thank you for a nice tutorial. I had the following error: 

"message": "JWT Validation Failed: IDX10205: Issuer validation failed. Issuer: 'https://sts.windows.net/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/'. Did not match: validationParameters.ValidIssuer: '' or validationParameters.ValidIssuers: 'https://login.microsoftonline.com/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/v2.0'.."

The solution for me was to add an issuer to the APIM policy, in this case: https://sts.windows.net/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/.

Is there any solution to the issue that is more convenient?

Best regards