Issue:
=====
Relates to OnPrem only.
If you use AAD authentication, then when trying to download symbols you may get an error including this in the callstack in the application log:
securitytokeninvalidaudienceexception
Solution:
=======
In BC Server Config, locate the setting "Valid Audiences":
Then specify this:
https://api.businesscentral.dynamics.com
More details here:
Using AAD authentication for development against a Business Central container (tobiasfenster.io)
Thank you Riivo from Itera for logging this.