Forum Discussion
Question for OAuth setting for "Try me" function in APIM developer portal
I am working on a APIM deployment that will have developer portal available to developers. Login to portal will only allow Azure B2C accounts and thus will have OAuth already performed. On the API...
Yes, 'Try it' fails with 401 if your API enforces JWT validation. Portal login tokens are not reused for API calls.
No security risk - just poor UX.
To avoid a second login: use the Authorization Code flow - the existing B2C session silently issues a new API token. Register a separate app for the console and republish the portal.