Azure API Management, single API accept AAD or subscription key

Question

Is it possible to have a single API in APIM that either accepts AAD token or subscription, based on what product it belongs to?

Default, this does not work, since unchecking "require subscription" on API-level will override setting product to require subscription.

So, I see two solutions.. create two APIs in APIM and place them in separate products (same backend), or write a custom policy. Is there a way to check context.Subscription.Key and match with the product subscriptions?

Vitaliy Kurokhtin · Accepted Answer · 2022-02-09 18:14:18Z

2

Should be possible by adding your API to two products:

One with subscription requirement enabled
Another without subscription requirement enabled, but with validate-jwt policy added at product level to require AAD token

answered Feb 9, 2022 at 18:14

Vitaliy Kurokhtin

7,9601 gold badge22 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Baked Inhalf Over a year ago

Oh, yes didn’t realize that one API can only be part of one open product and because of this, it will execute the policy from the open product! And having subscription required on API level makes this work!

Collectives™ on Stack Overflow

Azure API Management, single API accept AAD or subscription key

1 Answer 1

1 Comment

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Related