topic Re: Unable to call AML pipeline from Fabric data pipeline in Pipelines

Unable to call AML pipeline from Fabric data pipeline

redherring101 — Fri, 22 Nov 2024 18:54:23 GMT

I am trying to trigger an AML pipeline from my Fabric data pipeline, but I am getting the following error:

Request sent to Azure ML Service for operation 'validateWorkspace' failed with http status code 'Unauthorized'. Error message from Azure ML Service: '{"error":{"code":"InvalidAuthenticationTokenAudience","message":"The access token has been obtained for wrong audience or resource 'https://ml.azure.com'. It should exactly match with one of the allowed audiences 'https://management.core.windows.net/','https://management.core.windows.net','https://management.azure.com/','https://management.azure.com'."}}'.

I am using my organizational account to connect to the AML workspace from Fabric. This account has Contributor and AzureML Data Scientist access on the AML workspace.

Re: Unable to call AML pipeline from Fabric data pipeline

redherring101 — Fri, 22 Nov 2024 17:58:02 GMT

I am trying to trigger an AML pipeline from my Fabric data pipeline, but I am getting the following error:

I am using my Organizational account to set up the connection and that account does have access to AML. Here is a screenshot of the error:

Re: Unable to call AML pipeline from Fabric data pipeline

Anonymous — Mon, 25 Nov 2024 07:00:32 GMT

Hi redherring101 ,

Your question belongs to the Data Factory forum, and I have moved the post to the appropriate forum for you, where a professional will be able to help you.

Best Regards,
Yang
Community Support Team

Re: Unable to call AML pipeline from Fabric data pipeline

Anonymous — Tue, 26 Nov 2024 02:23:08 GMT

Hi redherring101 ,

It looks like the error you're encountering is due to the access token being issued for the wrong audience or resource. The token should be obtained for one of the allowed audiences such as https://management.core.windows.net/ or https://management.azure.com/ instead of https://ml.azure.com./

I think you can do these steps below:

1. Ensure that the token you are using is requested for the correct audience. You might need to modify the resource URL in your authentication request to match one of the allowed audiences.

2. Navigate to Azure Active Directory > App Registrations > Your App > API Permissions. Add the necessary permissions for Azure Service Management and grant admin consent.

You can read this topic as a reference:

Problem when i call a GET REQUEST with an AZURE Token, InvalidAuthenticationTokenAudience - Microsoft Q&A

3. Make sure you are using the correct authentication flow to obtain the token. For example, if you are using MSAL (Microsoft Authentication Library), ensure that the scope includes the correct resource URL.

Best Regards

Yilong Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: Unable to call AML pipeline from Fabric data pipeline

redherring101 — Tue, 26 Nov 2024 17:42:27 GMT

Hi Anonymous, thank you for your reply.

The thing is that I am not manually requesting a token here, in response to your suggestions 1 and 3. I am using the Azure Machine Learning Activity on the Fabric data pipeline UI to try and trigger an AML pipeline. I don't see an option to set the audience for the authentication request anywhere. The same thing works seamlessly in Synapse, so I think that this is a bug in Fabric whereby the Azure Machine Learning Activity is using the wrong audience when trying to authenticate with Azure Machine Learning.

In the Microsoft Entra admin center, I am unable to find this Fabric workspace under App Registrations, in response to your suggestion 2. I don't think that Fabric resources are really exposed to us like regular Azure resources.

Re: Unable to call AML pipeline from Fabric data pipeline

Anonymous — Thu, 05 Feb 2026 15:10:44 GMT

I'm having exactly the same problem still in 2026. Has this been fixed since 2024?

Re: Unable to call AML pipeline from Fabric data pipeline

AtchayaSenthil — Thu, 23 Jul 2026 16:51:17 GMT

Same issue here in July 2026 still unresolved. I hit InvalidAuthenticationTokenAudience on validateWorkspace calling Azure ML from the Fabric Azure Machine Learning activity.

Worth noting: this happens for me with Service Principal authentication too, not just Organizational account (which is what most of this thread describes). The service principal has the correct role assignment (AzureML Data Scientist) on the workspace, so it's not a permissions issue on our end ,the token audience being requested is wrong regardless of auth method.

Would appreciate an update on whether this has a tracked fix, and a timeline if so.