| Error Code | 500131 |
| Message | Assertion audience does not match the Client app presenting the assertion. The audience in the assertion was '{tokenAudience}' and the expected audience is '{expectedAudience}' or one of the Application Uris of this application with App ID '{appId}'({appName}). The downstream client must request a token for the expected audience (the application that made the OBO request) and this application should use that token as the assertion. |
| Remediation | Assertion is invalid because of various reasons: - The token issuer doesn't match the api version within its valid time range - Expired - Malformed - Refresh token in the assertion is not a primary refresh token |