You need the APIM developer portal’s console to obtain tokens via OAuth 2.0 client credentials from Azure AD when testing calls to a secured backend. You will configure an OAuth 2.0 authorization server in APIM. Which settings are required? (Choose three)
Choose an answer
Tap an option to check your answer.
Correct answer: Token endpoint URL, e.g., https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token, Grant type: Client credentials, Client ID and client secret registered in Azure AD for the application.
Why this is the answer
To obtain tokens using the OAuth 2.0 client credentials flow, the API Management (APIM) developer portal needs specific configuration. The Token endpoint URL is essential because it's where APIM sends requests to obtain an access token. For Azure AD, this URL follows the format https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token. The Grant type: Client credentials must be selected to specify that APIM will use the client credentials flow, which is suitable for machine-to-machine communication without user interaction. Finally, the Client ID and client secret registered in Azure AD for the application are required for APIM to authenticate itself with Azure AD and prove its identity when requesting a token. The "Authorization endpoint URL to support user sign-in" is used for authorization code flow, which involves user interaction, not client credentials flow. "PKCE requirement for the client" is also typically associated with authorization code flow to enhance security for public clients, not client credentials flow.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed