azure-active-directory

How can I create a Azure Web Application to authenticate User and acquire its Access Token?

ぃ、小莉子 提交于 2021-02-11 13:18:18
问题 I want to create an Azure Web Application that can authenticate an external/internal (from any Organization) user upon opening the Web Application link through Azure AD Credentials and acquire its Access token in return. I want to use that Access Token to programmatically create an application registration in User's tenant. 回答1: First, you need to register an application and set it as a multi-tenant application, then use the auth code flow to authenticate the user and obtain an access token.

Creating Azure AD B2C Social Account using graph API

◇◆丶佛笑我妖孽 提交于 2021-02-11 13:01:47
问题 I have added google and facebook as Identity Provider for my Azure AD B2C tenant . Now I want to create social users for both google and facebook using azure ad graph api . In api documentation it is mentioned that "userIdentities" is required attribute which is having to sub attributes "issuer" and "issuerUserId" . for "issuer" it is quite clear what should be the value , but am not able to find how to get "issuerUserId" for identityProvider. It is described as "The unique user identifier

Unable to send Email using Graph API (C# Console) by creating GraphServiceClient through AccessToken as well as ClientCredentialProvider

♀尐吖头ヾ 提交于 2021-02-11 12:50:15
问题 I get the following error Code: OrganizationFromTenantGuidNotFound Message: The tenant for tenant guid 'tenantId' does not exist. I created a .Net Core console app to send emails using the following 2 functions I used the following namespaces using Microsoft.Graph; using Microsoft.Graph.Auth; //In .Net Core this is in preview only using Microsoft.Identity.Client; using Microsoft.IdentityModel.Clients.ActiveDirectory; Common Email Message to be sent in both the functions var message = new

What is the authentication/authorization scenario for web app that calls API without signed in user in azure AD?

久未见 提交于 2021-02-11 12:41:19
问题 I have web app written in react which is Single Page Application. Then I have back end API written in .NET core 3.1. As I mentioned earlier I have web app written in react so this react web app has to call one more API to read some configs. This third application is also a API application written in .NET core 3.1. As soon as web app spins up, it will call this third APP and read configs like API URL of second application and other azure related details. Now this third API app should be

Login failed for user '<token-identified principal>' but works in Data Studio

不问归期 提交于 2021-02-11 12:32:16
问题 I am trying to use my AD account to connect to the Azure SQL using Java 8, JDBC Driver, and my accessToken. When I use Data Studio using my AD Account, I can connect successfully to the Azure SQL DB. But when I use my Java Program then it gives me this error: Request processing failed; nested exception is com.microsoft.sqlserver.jdbc.SQLServerException: Login failed for user '' My code abstract: SQLServerDataSource ds = new SQLServerDataSource(); ds.setServerName("NAME.database.windows.net");

How to get Principal Id in app service using Arm template?

只愿长相守 提交于 2021-02-11 12:28:58
问题 Hi I am writing ARM templates to deploy my app service. I want to create system identity in my arm template. In app service arm template section I have below code. "identity": { "principalId": "[reference(variables('identity_resource_id'), '2017-12-01', 'Full').identity.principalId]", "tenantId": "[parameters('tenantId')]", "type": "SystemAssigned" } Then in variable section I added "appServiceNameFrontEnd": "[concat(variables('defaultConvention'),'03-','FrontEnd')]" "identity_resource_id": "

Azure SQL and AAD Authentication

感情迁移 提交于 2021-02-11 08:45:42
问题 Is Azure SQL support access via AAD Client Id & Secret? If yes what would be the TSQL to give access to AAD ClientId and Can I use SSMS to connect to Azure SQL with AAD Client and secret? 回答1: Yes you can use the Access token (AD Token) Applications/services can retrieve an access token from the Azure Active Directory and use that to connect to SQL Azure Database. Provide anything( http://mytokentest ) in signonURL as while Registering your APP CREATE USER [mytokentest] FROM EXTERNAL PROVIDER

How to use oAuth State parameter on MSAL.NET

こ雲淡風輕ζ 提交于 2021-02-10 22:20:40
问题 I am trying to make usage of the state parameter which exists in OAuth2.0 authorization flow on a .NET Core project, using MSAL 4.0 but I couldn`t find a way to do it. I want to provide/append a custom value (Redirect the user back to the Uri where they clicked the sign-in button, after AuthN succeeds). To do that, I would also need to send the current Uri in 'state' and retrieve the state value back, but I don't see any method/property on AuthenticationResult.cs that would hold it. So, how

How to use oAuth State parameter on MSAL.NET

旧时模样 提交于 2021-02-10 22:10:26
问题 I am trying to make usage of the state parameter which exists in OAuth2.0 authorization flow on a .NET Core project, using MSAL 4.0 but I couldn`t find a way to do it. I want to provide/append a custom value (Redirect the user back to the Uri where they clicked the sign-in button, after AuthN succeeds). To do that, I would also need to send the current Uri in 'state' and retrieve the state value back, but I don't see any method/property on AuthenticationResult.cs that would hold it. So, how

Swift - Firebase Auth with Microsoft Graph (Redirect URL Problem)

假如想象 提交于 2021-02-10 20:40:42
问题 I'm having a problem integrating Firebase with Microsoft Auth in my iOS App. The login page has been launched and I can sign in by Office365 account but login auth can not be finished because of the below Error : "AADSTS50011: The reply url specified in the request does not match the reply urls configured for the application:[app-id]" I did check the setting in Firebase and below are the settings I add in the app of Azure Active Directory : Web redirect URL : "*.firebaseapp.com/__/auth