For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Olivier_Beytrison's avatar
Olivier_Beytrison
Icon for Cirrus rankCirrus
Apr 19, 2023
Solved

APM & Azure AD Oauth : using JWT values

Hello, I've successfully setup Azure AD Oauth with APM using this guide : https://my.f5.com/manage/s/article/K53313351 After logging in, I see (with the Oauth trace plugin for chrome) that Azure AD...
security
  • Olivier_Beytrison's avatar
    Olivier_Beytrison
    Apr 20, 2023

    Ok found the solution.

    In the access policy, I forgot to add "user.read profile" in the scope for the Oauth block.

    Now I can see all JWT values in the session variables.

southern_nordic's avatar
southern_nordic
Icon for Altocumulus rankAltocumulus
Jan 07, 2024

Where exactly did you add this "user.read profile"? I am usign the same guide and my troubleshooting shows the token also being rejected or flow being denied.