Skip to main content

Notifications

Supply chain | Supply Chain Management, Commerce
Answered

DA1017 - The audience validation failed.

(3) ShareShare
ReportReport
Posted on by 20
I receive the error message ""DA1017 - The audience validation failed. " when activating Store Commerce POS 10.0.42 with CSU 10.0.42. If I revert Store Commerce POS and the CSU installer back to version 10.0.41, I am able to successfully activate the POS. 
 
Environment:
 
10.0.41 VHD OneBox upgraded to 10.0.42 (Update 66)
Store Commerce POS and CSU (sealed) version 10.0.42 (Released 1/22/2025)
 
Message details from Store Commerce POS activation:
 

DA1017 - The audience validation failed. Contact your system administrator to set up identity providers properly in retail headquarters. - If you are using Personnel ID and Password logon, make sure relying parties are correctly configured. - If you are using Microsoft Entra ID logon, make sure both relying parties and server resource ids are correctly configured.

Event Viewer:

Provided audience 'https://commerce.dynamics.com' found within the token does not match any of the acceptable audiences 'api://hidden' configured for the the issuer 'https://sts.windows.net/hidden/'. This can be configured in the headquarter under Retail Shared Parameters->Identity Providers following by the job 1110 execution. Once the job completes it will take 5 minutes for Retail Server to detect the change.

Additional details:

I am using the same Azure app registration information, certificate thumbprints, CSU and Store Commerce POS installation scripts, D365 identity providers config, etc when testing 10.0.41 vs. 10.0.42 components. The leads me to believe it is not an Entra ID issue as the error message claims. But instead, an issue with the 10.0.42 CSU and Store Commerce POS releases. I have reproduced and confirmed this issue in five other test environments. 

Categories:
  • CU31010805-0 Profile Picture
    CU31010805-0 on at
    DA1017 - The audience validation failed.
    Thank you so much for the answer.
  • Ansar Basha Profile Picture
    Ansar Basha 1,580 on at
    DA1017 - The audience validation failed.
     
    Good to know issue is resolved, As I mentioned in my previous post, you need to addhttps://sts.windows.net/tenantId/" with default relying parties and make sure "https://commerce.dynamics.com" exists.
     
    Could you please mark my previous post as resolved, it may help others.
     
    Thanks & Regards,
    Ansar Basha.S
  • Suggested answer
    Ansar Basha Profile Picture
    Ansar Basha 1,580 on at
    DA1017 - The audience validation failed.
    Hello ​​​​​​​RN-24071723-0 ,
     
    Since you updated from 10.0.41 to 10.0.42, can you try installing retail reprovisioning tool and perform Commerce Initialization, push data to store.
     
    Hope this helps.
     
    Thanks & Regards,
    Ansar Basha.S
  • Verified answer
    RN-24071723-0 Profile Picture
    RN-24071723-0 20 on at
    DA1017 - The audience validation failed.
    I was able to find a solution for this issue. After updating the "https://sts.windows.net/" identity provider with the values below, I could successfully active Store Commerce POS. This solution worked to fix an issue introduced when upgrading VHD41 to 10.0.42. I cannot confirm this will fix all instances of this error message.
     
    Update Identity Providers with missing Relying Parties and Server Resource IDs

    Navigate to Retail and Commerce > Headquarters setup > Parameters > Commerce shared parameters> Identity Providers

    • Identity Providers >
      •  Issuer: https://sts.windows.net/(Azure Tenant ID)
        • Relying Parties > Add
          • ClientID: d5527362-3bc8-4e63-b5b3-606dc14747e9
          • Type: Public
          • UserType: Worker
          • Name: Blank
          • Save
        • Relying Parties > Add
          • ClientID: d6b5a0bd-bf3f-4a8c-b370-619fb3d0e1cc
          • Type: Public
          • UserType: Worker
          • Name: Blank
          • Save
          • Save
          • Run IISRESET from an administrator command prompt
          • Attempt Store Commerce POS activation again
    References:
    https://learn.microsoft.com/en-us/power-platform/admin/apps-to-allow
    https://community.dynamics.com/forums/thread/details/?threadid=490bb8c2-bda1-49fa-a9e7-08b96e06ecf4
  • RN-24071723-0 Profile Picture
    RN-24071723-0 20 on at
    DA1017 - The audience validation failed.
    Thank you for the reply @Ansar Basha.
     
    I configured the Commerce Shared Parameters based on your feedback and received a similar error message.
     
    "Provided audience 'https://commerce.dynamics.com' found within the token does not match any of the acceptable audiences 'https://commerce.dynamics.com/, api://hidden' configured for the the issuer 'https://sts.windows.net/hidden/'. This can be configured in the headquarter under Retail Shared Parameters->Identity Providers following by the job 1110 execution. Once the job completes it will take 5 minutes for Retail Server to detect the change."
     
    I received some feedback from others and found that anyone coming from VHD39 > 10.0.41 > 10.0.42 did not experience this issue. This has only occurred on systems coming from VHD41 > 10.0.42. So you may be correct that an authentication process has changed. I will continue troubleshooting and will post any updates here. Thanks again.
  • Suggested answer
    Ansar Basha Profile Picture
    Ansar Basha 1,580 on at
    DA1017 - The audience validation failed.
    Can you make sure that a value  "https://commerce.dynamics.comexists in Commerce Shared Parameters -> Identity providers.
     
    Additionally add "https://sts.windows.net/tenantId/" with default relying parties.
     
    May be in 10.0.42 New authentication process might have been added.
     
    Hope this helps.
     
    Thanks & Regards,
    Ansar Basha.S

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Vahid Ghafarpour – Community Spotlight

We are excited to recognize Vahid Ghafarpour as our February 2025 Community…

Congratulations to the January Top 10 leaders!

Check out the January community rock stars...

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 292,074 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 230,900 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans