I am using Sitecore 9.1 and have recently updated my .pfx identity server certificates in Azure, due to the old ones expiring. After updating the
Sitecore.IdentityServer.Host.xml configuration, the identity server issues JWTs with the correct
However, when I call my Sitecore API from Postman with a new JWT in the authorization header, Sitecore logs the following error:
ERROR Microsoft.Owin.Security.OAuth.OAuthBearerAuthenticationMiddleware - Authentication failed
Message: IDX10500: Signature validation failed. No security keys were provided to validate the signature.
Source: System.IdentityModel.Tokens.Jwt at System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateSignature(String token, TokenValidationParameters validationParameters)
at System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(String token, TokenValidationParameters validationParameters, SecurityToken& validatedToken)
at Microsoft.Owin.Security.Jwt.JwtFormat.Unprotect(String protectedText)
The new certificate has been correctly imported on Sitecore app service, so I'm thinking perhaps I need to update some configuration value somewhere. However, the only configuration values I can seem to find are in
App_Config\ConnectionStrings.config where some of the xconnect connection strings contain the thumbprint of the old certificate.
Are there any configurations I need to update with the thumbprint of my new certificate or something else I am missing?