Policy example Get OAuth2 access token from AAD using client id and certificate using key vault manage identity uses RSACng for its signing operations. However, per the APIM Policy Allowed Types list this is not an allowed type and attempting to use this type in an APIM policy results in the error message Usage of type 'System.Security.Cryptography.RSACng' is not supported within expressions