| Error Code | 7002121 |
| Message | No matching federated identity record found for presented assertion audience '{audience}'. The Audience for the federated identity credential for this issuer must be '{tokenExchangeUri}'. Please check your federated identity credential Subject, Audience and Issuer against the presented assertion. https://learn.microsoft.com/entra/workload-id/workload-identity-federation |
| Remediation | Configuration issue. Ensure that the federated identity record on the application registration or the managed identity is correct, and ensure that the submitted token complies with the policy requirements. See documentation at https://learn.microsoft.com/entra/workload-id/workload-identity-federation. |