Azure-docs: Add something referring ALLOWED TOKEN AUDIENCES == Resource

[masters3d]

It was hard to figure out that Audience here means Resource.
// Side note: I should be able to paste images in the on the report.

Because the first link has autherication, I assumed that this meant that I had to find the authorization link from the other place I wanted to be able to share tokens from.

It was not until I found this response that it clicked that I was giving the wrong link.
https://social.msdn.microsoft.com/Forums/azure/en-US/1366b552-f66d-4fc5-af1b-2af9b7bfc6c4/unable-to-authenticate-function-with-bearer-token?forum=AzureFunctions

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: b05bb7df-98fc-1342-640d-02063f6d8a11
• Version Independent ID: f6ac357f-f846-83c5-f19f-91e1bc0954e3
• Content: Token reference in Azure Active Directory B2C
• Content Source: articles/active-directory-b2c/active-directory-b2c-reference-tokens.md
• Service: active-directory
• GitHub Login: @davidmu1
• Microsoft Alias: davidmu

[MarileeTurscak-MSFT]

Thank you for the feedback! We are looking into this.

[MarileeTurscak-MSFT]

I agree that this is confusing. How would you suggest phrasing this so that more people facing this issue will understand right away what this means? We can make a note that Audience means Resource in the definition if that would be helpful.

[masters3d]

Not sure. I was hoping this would help:
https://social.msdn.microsoft.com/Forums/azure/en-US/1366b552-f66d-4fc5-af1b-2af9b7bfc6c4/unable-to-authenticate-function-with-bearer-token?forum=AzureFunctions

[MarileeTurscak-MSFT]

I added a small note about this to the audience definition in the document. Please open a new issue if you have additional recommendations for this document.

[TracyGH]

@MarileeTurscak-MSFT - Can you point me towards the document where you made the edit?
There are quite a few of us who have not been able to locate any documentation for 'ALLOWED TOKEN AUDIENCES '.
https://stackoverflow.com/questions/42640158/azure-active-directory-allow-token-audiences
Thank-you!

[seannybgoode]

+1 to the above

Explicitly doing this config in Azure is a little bit painful without documentation. It's a bit strange, because I didn't come across this issue when doing the config in my local IIS on the dev environment. Yet Azure somehow requires it.

Unless it's named something different in Azure than it is in the manual OpenIDConnect configuration examples.