[Blazor] Blazor Web App with multiple secure API not working with OIDC

[mihirpatelipsos]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

I was looking for the solution to work with Blazor Web App with multiple downstream secure APIs which were not part of the BWA project.
I've been following the BWA with OIDC (BFF pattern) article and sample based on following documents:

• https://learn.microsoft.com/en-us/aspnet/core/blazor/security/blazor-web-app-with-oidc?view=aspnetcore-9.0&pivots=with-bff-pattern
• https://github.com/dotnet/blazor-samples/tree/main/9.0/BlazorWebAppOidcBff

It is working fine when I am connecting to single secure API, but failing with following error when I try to add more than one API scopes:

It seems OIDC was failing with static scope limit exceeded error.

Code:

How can I work with the multiple secure APIs using OIDC or Entra Id based Identity through BWA?

Expected Behavior

Blazor Web App (BWA) should be able to access multiple secure APIs which are outside of Blazor project.

Steps To Reproduce

No response

Exceptions (if any)

No response

.NET Version

dotnet 9.0

Anything else?

cc: @guardrex dotnet/AspNetCore.Docs#34927

[halter73]

@jennyf19 @jmprieur I haven't seen this AADSTS70011 "static scope limit exceeded"AADSTS70011 "static scope limit exceeded" error before. Do you know what could cause it?

How many scopes are in the PredictorAPIScopes section?

[mihirpatelipsos]

@halter73 - Here is what I am using in Program.cs

And following is list of Scopes registered under App Registration for this API:

[MackinnonBuck]

Thanks for reaching out. This looks like an issue with Entra rather than ASP.NET Core, so we're going to close this out.

We'd recommend trying out Microsoft.Identity.Web. The docs can be found here: https://learn.microsoft.com/aspnet/core/blazor/security/blazor-web-app-with-entra?view=aspnetcore-9.0&pivots=non-bff-pattern. It's very similar to OIDC but uses the Entra-specific package. If you encounter a similar issue when using Microsoft.Identity.Web, you could open an issue in the microsoft-identity-web GitHub repo.