APIM policy for APIM request

Upasana Ghosh 346

Objectives:

Target implementation:

Upasana Ghosh 346 Reputation points

2022-10-27T16:59:15.667+00:00

@MuthuKumaranMurugaachari-MSFT can you have a look on this ?
MuthuKumaranMurugaachari-MSFT 22,276 Reputation points

2022-10-28T14:15:52.14+00:00

@Upasana Ghosh Thank you for reaching out to Microsoft Q&A. I assume, you have an APP registration (consumer application identity) with permissions added to access Graph API as described in docs. Want to validate in APIM policy that the app has specific roles or scope defined. Please clarify if my understanding is incorrect.

Use validate-jwt policy to validate the access token claims sent by client application (examples). This depends on how the access token was obtained from Azure AD. You can decode the token using https://jwt.io/ and validate the claims before adding it in the policy.

If you face any issues or questions, let me know (share the steps how you obtain the access token). Tagging azure AD experts also to assist on AD questions.
Upasana Ghosh 346 Reputation points

2022-10-28T18:19:41.617+00:00

yes right have an APP registration (consumer application identity) with permissions added to access Graph API . @MuthuKumaranMurugaachari-MSFT

3 answers