Thanks for the detailed info — that really helps clarify the situation.
Since the HTML site currently doesn’t have its own protection but is behind Azure Application Proxy with Azure AD pre-authentication, the key point is that Postman doesn’t support the interactive login flow that browsers do. That’s why you're getting the “Sign in to your account” message even with a token.
- For now, access via browser is the best option for the HTML page since it handles Azure AD authentication automatically.
- For Postman or Power Automate to work: Once OpenID authentication is set up on the APIs, we can use Client Credentials flow to get a token that works without user interaction. That will make automated access much smoother and avoid the current login issue.
Hope this helps. Do let us know if you have any further queries.
If this answers your query, do click Accept Answer and Yes for "Was this answer helpful." And if you have any further questions, let us know.