[BUG] Audience https://appservice.azure.com is not a supported MSI token audience.

[DevPranjal]

To Reproduce

az account get-access-token --resource=https://appservice.azure.com

Observed Behavior

Audience https://appservice.azure.com/ is not a supported MSI token audience.
Run the command below to authenticate interactively; additional arguments may be added as needed:
az logout
az login --scope "[https://appservice.azure.com/.default"](https://appservice.azure.com/.default%22)

Error occurring only since yesterday (13 Nov 2025), before which az webapp deploy used to work without this error

Interface information

• Accessing via https://portal.azure.com
• Edge on Windows 11

Additional context

SandboxHost-638986344592425209

[ppmiralles0110]

Try checking "SCM Basic Auth Publishing Credentials" in the Configuration of the App Service. It worked for me, I have the same issue just recently.

[yashkondawar]

Thanks a lot, this worked for us too.

[kaynatnoor8]

Did you enable or disable the "SCM Basic Auth Publishing Credentials" setting. In mycase neither is working. I have a flex consumption azur efunction and started getting this error recently for deployment.

[robins1212]

As a workaround, run az login --use-device-code first.

[mbifeld]

https://appservice.azure.com has been added to the list of supported token audiences for Cloud Shell. This change will fully roll out in 2-3 weeks.

[mbifeld]

This is resolved now in public cloud. The fix in government cloud will be out in several weeks.