Adventures in Azure API Management: Pay Attention to Order in Policies

I was trying to secure an Azure API Management (APIM) APIs with OAuth 2.0 and Azure AD per Protect API backend in API Management using OAuth 2.0 and Azure AD – Azure API Management | Microsoft Docs. My APIM managed API calls a back-end .NET Core API secured with Managed Identity. In my policy, which…