Issue with Creating Storage Event Trigger in Azure Synapse – Access Token Missing Required Claims

@Anil Kumar Nagar

Register the Microsoft.DataFactory resource provider on your subscription for storage event triggers to activate the same in Azure Synapse Analytics.

If you have already done this, please check the below troubleshooting steps:

The error message you're encountering indicates that the access token being used does not contain the required claims (puid, altsecid, or oid). This is often related to how the managed identity is configured or how the service principal is set up in your Azure tenant.

Service Principal Setup - If you are accessing the storage account as an application, make sure that the service principal is properly created in your Azure tenant and has the required permissions. The service principal should have the same roles assigned as the managed identity if it is being used.

Access Token Retrieval - If you are manually retrieving the access token, ensure that the token is being requested with the correct scopes and that the identity used to obtain the token has the necessary permissions.

For more details refer:

• Resolve Azure Synapse Analytics Apache Spark pool storage access issues
• Troubleshoot serverless SQL pool in Azure Synapse Analytics

Similar issues: https://learn.microsoft.com/en-us/answers/questions/1133028/errors-when-trying-to-create-a-storage-event-trigg

https://learn.microsoft.com/en-us/answers/questions/1292695/synapse-permission-problems-to-turn-storage-trigge

I hope this information helps.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.