Forum Discussion

amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Jul 08, 2026

APM OIDC debug logging is somehow verbose but not where it should - RFE

While I was configuring and testing an APM Access policy for an OIDC integration with Entra ID, I was seeing some backchannel errors logged (debug level) some HTTP error 400. The whole logging is qu...
apm.
openid connect
security
amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Jul 08, 2026

Hello Kostas,

it's not a recent case, I don't have the config handy anymore. It was a complicated case with Entra ID, issues with the Tenant that was initially not working as expected (Microsoft support involved etc..)
In the 400 json payload some helpful information:
"error": "invalid_request"
"error_description": "AADSTS50146: This application is required to be configured with an application-specific signing key. It is either not configured with one, or the key has expired or is not yet valid. Trace ID: db2a04a0-7d54-4d37

No issue using tcpdump, but it takes longer time in some customer environments until one can display the capture in wireshark...