Authorization (preview) Limitations

Question

Based on this info

[https://learn.microsoft.com/en-us/azure/api-management/authorizations-overview

I want to understand more what the following means.

• Maximum requests per minute per service: 250

What does this service mean?

1. Is it 250 requests max for that particular API Management Instance
2. Is it 250 requests PER Authorization Provider? So if I had 2 Authorization Providers, that means I get 250 + 250 per minute.?

I assume once a token is created, it can be used several times before being refreshed.

Even if the token is valid, it will go through Authorizations Context every time so if I had

1 request to create the token

3 requests afterwards

1 request to refresh the token

I'm guessing that's 5 requests total or is it just 2 (create + refresh token)?

Thanks

Answer 1

@Wong, Alex Thank you for reaching out to Microsoft Q&A. service represents apim and maximum number of requests per apim is 250 during preview. However, the actual numbers would vary based on SKU in GA. If you have any feedback on this feature, you can submit it to our product team directly via this form.

The limit applies for requests to fetch token or refresh token but not when the get-authorization-context policy is executed (Process flow) to check if existing authorization token is valid. So, in your example, total request count will be 2.

I hope this answers your question and feel free to add a comment if you have any other questions. We would be happy to assist you. Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community.