Number of audience values in the provided client credential exceed maximum allowed

[richard-dc]

I want to authenticate a user on Azure AD (EntraID), the application will use a ClientID and Certificate as authentication. When I use the configuration below, I get the following error:

AADSTS5002741: Number of audience values in the provided client credential exceed maximum allowed. 2 audience values provided, maximum allowed is 1

Provider configuration

{
        id: 'azure-sso-certificate',
        name: 'OIDC Provider',
        type: 'oidc',
        idToken: true,
        clientId: `<clientid>`,
        client: {
          token_endpoint_auth_method: 'private_key_jwt',
        },
        issuer: 'https://login.microsoftonline.com/<id>/v2.0/.well-known/openid-configuration',
        authorization: {
          url: 'https://login.microsoftonline.com/<id>/oauth2/v2.0/authorize',
          params: { 
            audience: 'https://login.microsoftonline.com/<id>/oauth2/v2.0/authorize',
            scope: 'openid profile email' 
          }
        },
        token: {
          url: 'https://login.microsoftonline.com/<id>/oauth2/v2.0/token',
          clientPrivateKey: {
            key: <CryptoKey>,
            kid: '<kid>',
          },  
        },
        checks: ['pkce'],
        async profile(profile: any, tokens: any) {
          return {
            email: profile.email,
            id: profile.id,
            name: profile.name,
          };
        },
      }