title: Azure: The access token has been obtained from wrong audience or resource
body: <p>Trying to create a simple task to list all resources in Azure portal. I followed the direction in the given URL and successfully received token.</p>
  
  <p><a href="http://azure-sdk-for-python.readthedocs.org/en/latest/resourcemanagement.html#authentication" rel="noreferrer">http://azure-sdk-for-python.readthedocs.org/en/latest/resourcemanagement.html#authentication</a>  </p>
  
  <p>However using the combination of token and superscription_id, I am getting the following error. </p>
  
  <p>ERROR:    </p>
  
  <pre><code>azure.common.AzureHttpError: {"error"{"code":"AuthenticationFailed","message":"The access token has been obtained from wrong audience or resource '00000002-0000-0000-c000-000000000000'. It should exactly match (including forward slash) with one of the allowed audiences 'https://management.core.windows.net/','https://management.azure.com/'."}}  
  </code></pre>
  
  <p>I have created an application in Active directory and assigned all permission to windows active directory</p>
  
  <p>Following is the code to get token: </p>
  
  <pre><code>def get_token_from_client_credentials(endpoint, client_id, client_secret):
      payload = {
          'grant_type': 'client_credentials',
          'client_id': client_id,
          'client_secret': client_secret
          # 'resource': 'https://management.core.windows.net/',
      }
      response = requests.post(endpoint, data=payload).json()
      return response['access_token']
  
  auth_token = get_token_from_client_credentials(endpoint='https://login.microsoftonline.com/11111111111-1111-11111-1111-111111111111/oauth2/token',
               client_id='22222222-2222-2222-2222-222222222222',
               client_secret='test/one/year/secret/key',
  </code></pre>
  
  <p>Trying to consume this token in the following code :  </p>
  
  <pre><code>def get_list_resource_groups(access_token, subscription_id):
      cred = SubscriptionCloudCredentials(subscription_id, access_token)
      resource_client = ResourceManagementClient(cred)
      resource_group_list = resource_client.resource_groups.list(None)
      rglist = resource_group_list.resource_groups
      return rglist
  </code></pre>