Comments for Good Workaround!

Comment on Today I found out – Azure AD ID Token signed by “unknown KID” by Ajish Abraham

Ajish Abraham — Sun, 08 Feb 2026 02:28:37 +0000

here is some more info https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/idx10501-token-signature-validation-error seems like this aponly apply if it was saml resource

Comment on Digging deep into Entra agent identities – #1 by Digging deep into Entra agent identities – #2 – Good Workaround!

Digging deep into Entra agent identities – #2 – Good Workaround! — Wed, 04 Feb 2026 13:55:43 +0000

[…] my previous blogpost, we dug into how to create the different object types used by agents, more specifically […]

Comment on Accessing resources cross tenant using managed service identities by Cronqvist

Cronqvist — Mon, 26 Jan 2026 10:32:16 +0000

In reply to Marius Solbakken.

Thank you for the quick response Marius.

I was afraid this would be the answer. I have tried so many scenarios without luck :-(

My company has a lot if Consumption Logic Apps needing to access resources cross-tenant. Unfortunately, we now have to re-thing this approach.

Comment on Accessing resources cross tenant using managed service identities by Marius Solbakken

Marius Solbakken — Mon, 26 Jan 2026 09:53:02 +0000

In reply to Cronqvist.

Hi, unfortunately probably no. LogicApps does not (as far as I know) allow you to get a token for api://AzureADTokenExchange, which means that the second step (getting a token for an app using a federated credential) does not work. Whether it is consumption based or not does not matter here.

Comment on Accessing resources cross tenant using managed service identities by Cronqvist

Cronqvist — Mon, 26 Jan 2026 09:42:19 +0000

Hi Marius.

Thank you for at great article.

Do you by any chance know if this approach will work with Consumtion Logic Apps?

Thanks.

Comment on Blazor WASM in Azure Static Web Apps 404 when authenticating with Entra ID by marc

marc — Tue, 16 Sep 2025 20:07:26 +0000

awesome. thanks, this has helped with an unrelated issue. I was getting a 404 when hitting refresh on a blazor wasm app that had a route to a child page. ie.

https://bevutils.marcbeavan.com worked fine when F5'ing, but https://bevutils.marcbeavan.com/textutils resulted in a 404.

Adding the fallback config worked a treat!

Comment on Testing out the Entra ID inbound provisioning API by Shalin

Shalin — Fri, 25 Jul 2025 13:55:30 +0000

Is it possible to set the password for the new user created from the PowerShell after setting the attribute mapping passwordProfile.passowrd ?

Comment on Accessing resources cross tenant using managed service identities by Em

Em — Mon, 16 Jun 2025 16:56:29 +0000

In reply to Marius Solbakken.

Would also like to register my interest for this Thanks for your insight!

Comment on Accessing resources cross tenant using managed service identities by Win

Win — Sat, 31 May 2025 06:41:39 +0000

Hi Marius,

I followed the above instructions but I am getting the folllowing error while running the script.

Invoke-RestMethod: Line | 47 | $r = Invoke-RestMethod -Uri "https://graph.microsoft.com/v1.0/users?` … | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2025-05-31T06:36:11","request-id":"5e4b67c0-ec39-0000-0000-1d0908a71046","client-request-id":"5e4b67c0-ec39-4000-0000-1d0908a71046"}}}

Can you please help? thanks

Comment on Issuing Custom Security Attributes in Entra ID tokens by delicate1cae97208a

delicate1cae97208a — Tue, 06 May 2025 09:25:10 +0000

In reply to Warrell Harries.

To my astonishment, and without an alternative approach, I was able to get this working. Thank you Marius! A few months later I added a new attribute (as the Java SDK code snippets are broken) and now the authentication for the Extension no longer works. I have spent many days trying to work out what is going wrong but until I can figure it out all User testing is stopped. Can anyone help? Many thanks