Validating Entra Tokens in Azure API Management

Part 5 of 6 in the Entra ID Authentication: A Field Guide series. A partner sends you a token. It is signed correctly, the audience is right, it has not expired — and API Management returns 401 with n