The jwt token created by my External entra id tenant keeps changing issuer format

Daniel Lerner 0

When looking at the issuer in the https://<tenant>.ciamlogin.com/<tenant-id>/v2.0/.well-known/openid-configuration endpoint, it comes back as:

https://<tenant-id>.ciamlogin.com/<tenant-id>/v2.0

Sometimes, this is indeed the issuer that comes back in the jwt token and it works fine. However, periodically, it switches to:

This obviously makes it quite difficult to guard the api. Why does this keep changing and how do I configure entra so that this stays the same?

Your answer