I am attempting to implement a simple Azure APIm policy that enforces Entra ID OIDC, and then calls a b