external managed identity usecase help!!!

[GaneshChile0307]

Hello @caseywatson ,

I am able to follow the Mona Setup and Configurations with Azure partner center. so far I am able to get subscription from landing page and capture into redirect . I created a sample nextjs app to capture this sabscription id from url .

Now i want to call activate api of market place using this subscirption id. As i understand we need to make use of external identity that mona deployed during its process of deployment.

I am not able to get hold on to that part. how can I use external managed identity to get token and make activate subscription api .?

approach 1:
I try to change the purchase-subscription logic app and after i get subscription_id from body , i make http call using external managed identity.But hence i get forbidden error.I know this is related with invalid token

approach 2:
I made as I mentioned before a sample nextjs app to capture and process subscription id. i get error that "'The authorization token included in the request is valid, however it does not include the correct audience or the entra app id.'"

With all this I assume if you coudl help with above, this would apply for all marketplace apis e.g. get subscription details, plans and so..

Is there any configuration I missed there ?
please really your help is appreciated.