Forum Discussion

amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Jul 08, 2026

APM OIDC debug logging is somehow verbose but not where it should - RFE

While I was configuring and testing an APM Access policy for an OIDC integration with Entra ID, I was seeing some backchannel errors logged (debug level) some HTTP error 400. The whole logging is qu...
apm.
openid connect
security
Injeyan_Kostas's avatar
Injeyan_Kostas
Icon for MVP rankMVP
Jul 08, 2026

Hello amolari​ 

Could you paste here your configuration, oauth server, access policy, etc ?

  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Jul 08, 2026

    Hello Kostas,

    it's not a recent case, I don't have the config handy anymore. It was a complicated case with Entra ID, issues with the Tenant that was initially not working as expected (Microsoft support involved etc..)
    In the 400 json payload some helpful information:
    "error": "invalid_request"
    "error_description": "AADSTS50146: This application is required to be configured with an application-specific signing key. It is either not configured with one, or the key has expired or is not yet valid. Trace ID: db2a04a0-7d54-4d37

    No issue using tcpdump, but it takes longer time in some customer environments until one can display the capture in wireshark...