[BUG] Audience https://appservice.azure.com is not a supported MSI token audience.
To Reproduce
az account get-access-token --resource=https://appservice.azure.com
Observed Behavior
Audience https://appservice.azure.com/ is not a supported MSI token audience.
Run the command below to authenticate interactively; additional arguments may be added as needed:
az logout
az login --scope "[https://appservice.azure.com/.default"](https://appservice.azure.com/.default%22)
Error occurring only since yesterday (13 Nov 2025), before which az webapp deploy used to work without this error
Interface information
- Accessing via https://portal.azure.com
- Edge on Windows 11
Additional context
SandboxHost-638986344592425209
Try checking "SCM Basic Auth Publishing Credentials" in the Configuration of the App Service. It worked for me, I have the same issue just recently.
Thanks a lot, this worked for us too.
Did you enable or disable the "SCM Basic Auth Publishing Credentials" setting. In mycase neither is working. I have a flex consumption azur efunction and started getting this error recently for deployment.
As a workaround, run az login --use-device-code first.