Azure AD orchestration fails with error "Access token validation failure. Invalid audience" - Support and Troubleshooting

Azure AD orchestration fails with error "Access token validation failure. Invalid audience" Issue When we perform simple Azure AD user lookups will get the following error response.

Steps to reproduce:

Go to "Azure AD user management" REST message Click "Get Oauth Token" related link. Oauth token flow should complete successfully. In HTTP Methods related list, click "get" method. In the "get" method record, click "Test" related link to see the failure message { "error": { "code": "InvalidAuthenticationToken", "message": "Access token validation failure. Invalid audience.", "innerError": { "request-id": "4ed45b90-7d4f-4038-ad8a-a0a7e904f408", "date": "2019-08-27T20:53:23" } }

Cause The OAuth Scope for the Azure AD default_profile is set incorrectly

Resolution To acquire a token for performing Microsoft Graph API tasks in Azure AD, it's necessary to configure the OAuth Scope for the default_profile in Azure AD to " https://graph.microsoft.com/.default "