azure-active-directory

Azure AD v2.0-specific optional claims missing from ID Token

眉间皱痕 提交于 2021-02-04 21:46:25
问题 I'm trying to add optional claims using Microsoft Identity Web - NuGet for user authentication in NET Core 3.1 WebApp. Reading the MS Docs, it seems that the only steps needed are to declare the optional claims within the App Registration Manifest file in Azure. But when testing the login process using two different apps (my own code and an MS project example) it looks like the optional claims are not being added to the ID Token when returned from Azure following a successful login i.e they

Azure AD B2C Custom UI error labels shown on first load

你。 提交于 2021-02-04 21:31:31
问题 I have an Azure AD B2C tenant. I have created a (default) SignUpAndSignInPolicy and added a custom UI template for the sign-in page, the sign-up page and the reset-password page. All is working well except, on the sign-up page as well as on the reset-password page, the form input fields are always marked "invalid" on the initial load. This causes the error hint to be visible, although there was no user input yet into the form field. I want to have the same experience as on the sample page of

Azure AD B2C Custom UI error labels shown on first load

大城市里の小女人 提交于 2021-02-04 21:31:10
问题 I have an Azure AD B2C tenant. I have created a (default) SignUpAndSignInPolicy and added a custom UI template for the sign-in page, the sign-up page and the reset-password page. All is working well except, on the sign-up page as well as on the reset-password page, the form input fields are always marked "invalid" on the initial load. This causes the error hint to be visible, although there was no user input yet into the form field. I want to have the same experience as on the sample page of

Azure AD B2C Custom UI error labels shown on first load

别来无恙 提交于 2021-02-04 21:31:07
问题 I have an Azure AD B2C tenant. I have created a (default) SignUpAndSignInPolicy and added a custom UI template for the sign-in page, the sign-up page and the reset-password page. All is working well except, on the sign-up page as well as on the reset-password page, the form input fields are always marked "invalid" on the initial load. This causes the error hint to be visible, although there was no user input yet into the form field. I want to have the same experience as on the sample page of

Azure AD B2C: User.Identity.Name is null, but User.Identity.m_instance_claims[9] has the name

女生的网名这么多〃 提交于 2021-02-04 19:40:08
问题 After a user is authenticated into my Azure AD B2C web application, I attempt to retrieve User.Identity.Name ; however, it is null. Yet, User.Identity.m_instance_claims[9] , as shown in the screenshot below, does correctly have the name. How can this be? How can I get User.Identity.Name = User.Identity.m_instance_claims[9] ? (Note that the latter is a private variable, and it cannot be used as a substitute for User.Identity.Name . UPDATE I have also added the following to the Web.config file:

Change redirectURI and CallbackPath for AzureAD authentication in .net core 3.1.1 web app

|▌冷眼眸甩不掉的悲伤 提交于 2021-02-02 10:00:42
问题 I created a new .net core 3.1.1 web application with the Razor Pages framework. When creating the app I set up the default Authentication as AzureAd. When I run the application the authentication works just fine. The generated appsettings file looks like this: { "AzureAd": { "Instance": "https://login.microsoftonline.com/", "Domain": "myDomain", "TenantId": "myTenantId", "ClientId": "myClientId", "CallbackPath": "/signin-oidc" }, "Logging": { "LogLevel": { "Default": "Information", "Microsoft

Change redirectURI and CallbackPath for AzureAD authentication in .net core 3.1.1 web app

淺唱寂寞╮ 提交于 2021-02-02 09:57:26
问题 I created a new .net core 3.1.1 web application with the Razor Pages framework. When creating the app I set up the default Authentication as AzureAd. When I run the application the authentication works just fine. The generated appsettings file looks like this: { "AzureAd": { "Instance": "https://login.microsoftonline.com/", "Domain": "myDomain", "TenantId": "myTenantId", "ClientId": "myClientId", "CallbackPath": "/signin-oidc" }, "Logging": { "LogLevel": { "Default": "Information", "Microsoft

Can't create an event with extended data

喜夏-厌秋 提交于 2021-01-29 20:40:37
问题 I am trying to create a calendar event with extended data using Microsoft Graph API.(actually, I am trying to converting the existing open extension to schema extension since I couldn't filter the non-id extended value of the open extension.) Before my try, I have already created my schema extension successfully and creating a calendar event with the schema extension responses an error code "BadRequest" and message "Requests must contain extension changes exclusively". I tried to do this by

Can't create a schema extension

扶醉桌前 提交于 2021-01-29 15:41:29
问题 I am trying to create a schema extension in Microsoft Graph API. But it has failed with error message "Property type is invalid for target types". POST https://graph.microsoft.com/v1.0/schemaExtensions Content-type: application/json { "id":"extendedData", "description": "Graph Learn training courses extensions", "targetTypes": [ "Event" ], "properties": [ { "name": "courseId", "type": "Integer" }, { "name": "materialId", "type": "Integer" }, { "name": "courseType", "type": "String" } ] }

invalid_grant: AADSTS50126: Error validating credentials due to invalid username or password

心不动则不痛 提交于 2021-01-29 15:27:25
问题 I am trying to hit a post request to "https://login.microsoftonline.com/<My_Tenat_Id>/oauth2/token" from my Java Code, but I am getting the error "invalid_grant: AADSTS50126: Error validating credentials due to invalid username or password". I have verified the credentials and they are correct(I am able to login to Azure portal and see my AWS APP for SSO). I even tried hitting the same request from postman, but then also same issue. The parameters I have passed are: "grant_type", "password"