Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,890 questions
"JWT validation failed: Issuer validation failure" - Error
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 59%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Shashikant Sharma
85
Reputation points
While trying to access an Azure function via a client application, I encountered an error in function authentication as
"JWT validation failed: Issuer validation failure - Expected: https://login.microsoftonline.com/<tenant-id>/v2.0; Token: https://sts.windows.net/<tenant-id>/"
I understand The issuer for Access token V1 is https://sts.windows.net/ and for Access token V2 it is https://login.microsoft.com/ .” But as I was verifying accessTokenAcceptedVersion setting in the app manifest for my registered Azure function and registered client app, values is set as "accessTokenAcceptedVersion": null. Microsoft doc says “The values of null and 1 result in v1.0 tokens, and the value of 2 results in v2.0 tokens.”.
As for our Apps, value of accessTokenAcceptedVersion was net to null, why we were required to modify app configurations as per Token version V2?
Why value "accessTokenAcceptedVersion": null is rejected by Azure?
{count} votes
-
Akshay-MSFT 17,771 Reputation points Microsoft Employee2023-06-06T08:51:24.8366667+00:00 Thank your for posting your query on Microsoft Q&A. From above description I could understand that you are getting authentication issue while you AAD application is set to accept token from V1.0 endpoint.
To investigate through this, kindly share the application Manifest (removing any PII) for review.
Thanks,
Akshay Kaushik
-
Shashikant Sharma 85 Reputation points
2023-06-06T10:37:16.4766667+00:00 issue resolved
-
Akshay-MSFT 17,771 Reputation points Microsoft Employee
2023-06-30T13:34:54.47+00:00 Thanks for your response. I would request you to share the solution here so that our community members facing similar issue could be helped.
Thanks,
Akshay Kaushik
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 16%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJK%3C/text%3E%3C/svg%3E)
Jayant Kashid 0 Reputation points2024-03-02T10:42:13.4133333+00:00 How your issue got resolved?
Currently I am facing similar issue.
Can you recommend what shaoul dbe settings to do when it comes to v2.0 ?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 93%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBG%3C/text%3E%3C/svg%3E)
Ben Gimblett 4,330 Reputation points Microsoft Employee2024-03-06T15:26:04.5466667+00:00 It is worth pointing out there's two ways of validating oauth in functions
(1) using easyauth
(2) bring your own SDK (for example Microsoft.identity)In the former, using easyauth https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization easyauth will deal with BOTH v1 and v2 format incoming tokens and irrespective of the format input for claims check (e.g. aud claim, where the format could be guid or URI depending on the version of the token)
Point being when using easy auth you dont need to worry about the token version
(As an aside an access token obtained via an Managed Service Identity, from an upstream caller would likely be v1 token format today)
-
Ben Gimblett 4,330 Reputation points Microsoft Employee
2024-03-06T15:27:34.76+00:00 @Jayant Kashid did you get your issue resolved?
Sign in to comment
Sign in to answer