API GW integration with Microsoft Entra ID

Products

• CA API Gateway

Issue/Introduction

We need help in integrating GW with Microsoft Entra ID which will be used as external OTK.

It would be helpful if you can share any insights on external OTK integration related to Entra ID.

Resolution

Entra ID in this case is the OP and the gateway is acting as a resource server.

MS does not appear to support token introspection as such:
They can locally build logic to validate the JWT. There is information in microsoft docs on "token Validation"

https://learn.microsoft.com/en-us/entra/identity-platform/access-tokens