There is a small config error for the JWT Bearer options in Startup.cs. Line 77: options.Audience = clientId; should be: options.Audience = audience;