CloudShell icon indicating copy to clipboard operation
CloudShell copied to clipboard

[BUG] Audience https://appservice.azure.com is not a supported MSI token audience.

Open DevPranjal opened this issue 3 months ago • 4 comments

To Reproduce

az account get-access-token --resource=https://appservice.azure.com

Observed Behavior

Audience https://appservice.azure.com/ is not a supported MSI token audience.
Run the command below to authenticate interactively; additional arguments may be added as needed:
az logout
az login --scope "[https://appservice.azure.com/.default"](https://appservice.azure.com/.default%22)

Error occurring only since yesterday (13 Nov 2025), before which az webapp deploy used to work without this error

Interface information

  • Accessing via https://portal.azure.com
  • Edge on Windows 11

Additional context

SandboxHost-638986344592425209

DevPranjal avatar Nov 14 '25 08:11 DevPranjal

Try checking "SCM Basic Auth Publishing Credentials" in the Configuration of the App Service. It worked for me, I have the same issue just recently.

ppmiralles0110 avatar Nov 17 '25 06:11 ppmiralles0110

Thanks a lot, this worked for us too.

yashkondawar avatar Nov 17 '25 07:11 yashkondawar

Did you enable or disable the "SCM Basic Auth Publishing Credentials" setting. In mycase neither is working. I have a flex consumption azur efunction and started getting this error recently for deployment.

kaynatnoor8 avatar Nov 19 '25 09:11 kaynatnoor8

As a workaround, run az login --use-device-code first.

robins1212 avatar Nov 27 '25 00:11 robins1212