jwt-validate-simple.xml

<validate-jwt header-name="Authorization" 
              failed-validation-httpcode="401" 
              require-scheme="Bearer" 
              output-token-variable-name="securityToken">
  <issuer-signing-keys>
    :public_key_goes_here:
  </issuer-signing-keys>
  <audiences>
      <audience>acmeApi1</audience>
  </audiences>
  <issuers>
    <issuer>
      acme.powerappsportals.com
    </issuer>
  </issuers>
 </validate-jwt>