Share via

Azure OnBehalfOfCredential : Java GraphClient failed to create the credential to access Sharepoint through OBO

TobiasKolb-0263 1 Reputation point
2022-09-21T13:23:47.307+00:00

I get the following error message when I try to create an OBO credential:

"Azure Identity => ERROR in getToken() call for scopes [Sites.Read.All]: AADSTS50013: Assertion failed signature validation. [Reason - Key was found, but use of the key to verify the signature failed."

The Azure app is configured with the following permissions:

  • openid (Delegated)
  • Sites.Read.All (Delegated)
  • User.Read (Delegated)

Scenario :

User sign-in to the Azure app

Store the access_token as a string

Passing the access_token to the OnBehalfOfCredential method

Logging into the Azure app and getting the access_token & id_token works, just not creating the OBO credential.

Microsoft Security | Microsoft Graph
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.