An Azure service that provides hosted, universal storage for Azure app configurations.
I see in the image, this looks like a UI persistence bug in the Azure AI Foundry interface for configuring Custom MCP servers.
Here’s what’s happening:
- The Audience field is present in the dialog and is required for Microsoft Entra authentication when using Agent Identity.
- After you enter the Audience and click Update, the value is not retained when you reopen the dialog. This suggests the UI is not persisting the parameter to the backend configuration.
- Because the Audience is missing in the stored configuration, the agent fails to authenticate against your MCP server (since the token validation requires the correct Audience claim).
For Entra-based auth, the Audience is critical because it tells the token issuer what resource the token is intended for. If it’s missing, the MCP server rejects the token.
Recommended Actions
- Verify API Behavior Check if the Audience is actually being saved in the backend by calling the Foundry API or inspecting the configuration JSON. If it’s missing there too, it’s definitely a persistence bug.
- Workaround
- If the UI doesn’t retain the Audience, try using the Foundry CLI or REST API to update the MCP server configuration directly.
- Include the
audienceparameter explicitly in the payload when creating or updating the MCP connection. - Double-check Agent Identity Settings Ensure the MCP server expects the same Audience you configured. Sometimes mismatched resource IDs cause silent failures.
References:
I Hope this helps. Do let me know if you have any further queries.
Thank you!