Repository navigation
[BUG] Audience https://appservice.azure.com is not a supported MSI token audience. #577
Description
To Reproduce
az account get-access-token --resource=https://appservice.azure.com
Observed Behavior
Audience https://appservice.azure.com/ is not a supported MSI token audience.
Run the command below to authenticate interactively; additional arguments may be added as needed:
az logout
az login --scope "[https://appservice.azure.com/.default"](https://appservice.azure.com/.default%22)
Error occurring only since yesterday (13 Nov 2025), before which az webapp deploy used to work without this error
Interface information
- Accessing via https://portal.azure.com
- Edge on Windows 11
Additional context
SandboxHost-638986344592425209
Activity
ppmiralles0110 commentedon Nov 17, 2025
Try checking "SCM Basic Auth Publishing Credentials" in the Configuration of the App Service. It worked for me, I have the same issue just recently.
yashkondawar commentedon Nov 17, 2025
Thanks a lot, this worked for us too.
kaynatnoor8 commentedon Nov 19, 2025
Did you enable or disable the "SCM Basic Auth Publishing Credentials" setting. In mycase neither is working. I have a flex consumption azur efunction and started getting this error recently for deployment.
robins1212 commentedon Nov 27, 2025
As a workaround, run
az login --use-device-codefirst.mbifeld commentedon Jan 14, 2026
https://appservice.azure.com has been added to the list of supported token audiences for Cloud Shell. This change will fully roll out in 2-3 weeks.
mbifeld commentedon Feb 10, 2026
This is resolved now in public cloud. The fix in government cloud will be out in several weeks.