Setting up custom signing certificate for a multi-tenant app with Entra Id

Question

https://learn.microsoft.com/en-us/entra/identity-platform/jwt-claims-customization#configure-a-custom-signing-key

As described in this article, we are trying to setup custom signing key for teams application we are building. I have created a cert and uploaded to the hosted web app. I saw in other forums as well which mentioned to try POST instead of PATCH.

I tried both POST and PATCH calls for custom signing.
Post - https://graph.microsoft.com/v1.0/servicePrincipals/{id}/microsoft.graph.addKey
Patch - https://graph.microsoft.com/v1.0/servicePrincipals/{id}

Getting 403 error with Post - "Forbidden - 403 - 376ms. Either the signed-in user does not have sufficient privileges, or you need to consent to one of the permissions on the Modify permissions tab". In the modify permissions tab, I have got all the permissions. Also, I got admin privileges as well and ended up with same issue.

With Patch request, getting 400 error - "Property keyCredentials is invalid." And when I did a get call the response contains an empty keyCredentials node.

I generated the JSON request using the PowerShell script in this article - https://learn.microsoft.com/en-us/entra/identity-platform/jwt-claims-customization#configure-a-custo.... Please let me know if I'm missing any steps or how do I get the custom signing setup?

Answer 1

This issue is more related to Identity, so please raise it here: