apim-jwt-policy.xml

<policies>
    <inbound>
        <base />
        <validate-jwt header-name="Authorization" failed-validation-httpcode="401" failed-validation-error-message="Failed.">
            <openid-config url="https://demo.identityserver.io/.well-known/openid-configuration" />
            <audiences>
                <audience>api</audience>
            </audiences>
            <issuers>
                <issuer>https://demo.identityserver.io/</issuer>
            </issuers>
        </validate-jwt>
        <set-backend-service id="apim-generated-policy" backend-id="identity-demo-api" />
    </inbound>
    <backend>
        <base />
    </backend>
    <outbound>
        <base />
    </outbound>
    <on-error>
        <base />
    </on-error>
</policies>