WebPubSub Managed Identity in Event Handler not recognized

Question

WebPubSub Managed Identity in Event Handler not recognized

Adrian Stauffer 20

Hey all,

does anyone have an idea why my event handler for Web PubSub claims I don't have a Managed Identity if in fact I do have one? Is this a bug? I have tried everything (turn on and off, restart the resource, ...) but to no avail.

User's image

It seems I can't get the required token that way. Any ideas what I can do here?

Thanks for your help!

Shree Hima Bindu Maganti 4,775 Reputation points Microsoft External Staff Moderator

2025-05-01T11:18:35.6133333+00:00
Hi @Adrian Stauffer
It sounds like you're having trouble with the Managed Identity not being recognized in your Web PubSub event handler.

Ensure that you have correctly added either a system-assigned or user-assigned identity to your Web PubSub resource. You can verify this in the Azure portal under the Identity section of your Web PubSub resource.

Identity" and configured the audience correctly.

If you are specifying the audience for the token, ensure that it matches what your event handler expects. The audience becomes the aud claim in the access token.

If you're using a user-assigned identity, ensure that you have created a service principal and that its Application ID or Application ID URI is correctly set in your configuration.

Validate that the access token is being sent in the Authorization header of your requests. If the token is missing or invalid, the event handler will not recognize the Managed Identity.
Use a managed identity in client events scenarios

Use a managed identity

Authorize requests to Azure Web PubSub resources with Managed identities for Azure resources
Let me know if you have any further assistances
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-05-05T10:32:10.43+00:00

Adrian Stauffer, Just checking in to see if the information provided by Shree Hima Bindu Maganti was helpful. If you have any further updates or any other queries on this issue, please feel free to post back
Sampath 3,750 Reputation points Microsoft External Staff Moderator

2025-05-06T06:57:45.2733333+00:00
Hello @Adrian Stauffer,

Enable Managed Identity for Azure Web PubSub

Go to the Azure Portal: Sign in at Azure Portal.

Navigate to Web PubSub Resource:

Search for Azure Web PubSub in the top search bar.

Click on your resource from the list.

Access Identity Settings:

In the left-side menu, select Identity under "Settings."

Enable System-assigned Managed Identity:

Toggle System-assigned identity to On.

Click Save.

Confirm Identity Creation:

After enabling, Azure will create the Managed Identity automatically.

You’ll see an Object ID linked to the identity.

Grant Permissions (if needed):

Navigate to Azure Role Assignments.

Assign the Managed Identity necessary roles (e.g., Contributor, Web PubSub Service Owner).

Return to Authentication Settings:

Go back to the original service configuration.

Click Refresh to check if the Managed Identity is now detected.

Once enabled, your Web PubSub service should be able to authenticate securely without needing credentials stored in code.

If you have any further questions, please let me know. If the comment was helpful, kindly upvote it.

1 answer

Your answer

Shree Hima Bindu Maganti 4,775 Reputation points Microsoft External Staff Moderator

2025-05-01T11:18:35.6133333+00:00

Hi @Adrian Stauffer
It sounds like you're having trouble with the Managed Identity not being recognized in your Web PubSub event handler.

Ensure that you have correctly added either a system-assigned or user-assigned identity to your Web PubSub resource. You can verify this in the Azure portal under the Identity section of your Web PubSub resource.

Identity" and configured the audience correctly.

If you are specifying the audience for the token, ensure that it matches what your event handler expects. The audience becomes the aud claim in the access token.

If you're using a user-assigned identity, ensure that you have created a service principal and that its Application ID or Application ID URI is correctly set in your configuration.

Validate that the access token is being sent in the Authorization header of your requests. If the token is missing or invalid, the event handler will not recognize the Managed Identity.
Use a managed identity in client events scenarios

Use a managed identity

Authorize requests to Azure Web PubSub resources with Managed identities for Azure resources
Let me know if you have any further assistances
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-05-05T10:32:10.43+00:00

Adrian Stauffer, Just checking in to see if the information provided by Shree Hima Bindu Maganti was helpful. If you have any further updates or any other queries on this issue, please feel free to post back
Sampath 3,750 Reputation points Microsoft External Staff Moderator

2025-05-06T06:57:45.2733333+00:00

Hello @Adrian Stauffer,

Enable Managed Identity for Azure Web PubSub

Go to the Azure Portal: Sign in at Azure Portal.

Navigate to Web PubSub Resource:

Search for Azure Web PubSub in the top search bar.

Click on your resource from the list.

Access Identity Settings:

In the left-side menu, select Identity under "Settings."

Enable System-assigned Managed Identity:

Toggle System-assigned identity to On.

Click Save.

Confirm Identity Creation:

After enabling, Azure will create the Managed Identity automatically.

You’ll see an Object ID linked to the identity.

Grant Permissions (if needed):

Navigate to Azure Role Assignments.

Assign the Managed Identity necessary roles (e.g., Contributor, Web PubSub Service Owner).

Return to Authentication Settings:

Go back to the original service configuration.

Click Refresh to check if the Managed Identity is now detected.

Once enabled, your Web PubSub service should be able to authenticate securely without needing credentials stored in code.

If you have any further questions, please let me know. If the comment was helpful, kindly upvote it.

Answer 1

@Adrian Stauffer Apologies for the inconvenience caused. This appears to be a bug in the portal UI.

Thanks for bringing this to our attention. I've reached out to the team for a fix.

As a workaround, you can use Azure CLI to configure the Managed Identity for the event handler. This method bypasses the portal issue and allows for correct setup.

Please refer to the following Microsoft Learn article for detailed steps: How to configure event handler | Microsoft Learn

Let us know if further assistance is required!

Share via

WebPubSub Managed Identity in Event Handler not recognized

1 answer

Your answer