azure-active-directory

OpenIdConnect Correlation Cookie not found when user click link from Office application

落花浮王杯 提交于 2021-01-27 12:02:16
问题 I have an app that is authenticating with Azure Active Directory using OpenIdConnect. Everything is working fine except when I link to my site from a Office Application (excel/ word). From these applications I get a "Exception: Correlation failed.". From my research it seems to be that office is first doing the 302 redirect and then opening that page not the original link. See: https://github.com/aspnet/Security/issues/1252 After a recommendation for how to handle this scenario. I don't want

AADSTS700054: response_type 'id_token' is not enabled for the application

喜夏-厌秋 提交于 2021-01-21 01:40:46
问题 Using adal.js v1.0.17 and Web API via JavaScript. Running a custom tab within Microsoft Teams and getting this error when trying to authenticate. Looked at the app registration within Azure portal and not seen anything there that could help. Tried to edit the manifest file and change the value of oauth2AllowImplicitFlow to true but still getting error. 回答1: Found the solution. Need to access the Azure portal using Chrome. Go to Azure Active Directory and choose App Registrations (Preview).

How to access two separate Web APIs protected using Azure AD B2C from a web app

此生再无相见时 提交于 2021-01-20 13:36:41
问题 We have two separeate dotnet core apis(API1 & API2) that are protected using azure ad b2c. Both these apis are registered on the b2c tenant and have their scopes exposed. We have a client web applicaiton that is to access the above protected apis. This web app has been registered as a applicaiton in b2c tenant and has api permissions set for the above apis with proper scopes defined. We use MSAL.net with a signinpolicy to sign the user in to the web app. the authentication call requires

How to access two separate Web APIs protected using Azure AD B2C from a web app

醉酒当歌 提交于 2021-01-20 13:34:54
问题 We have two separeate dotnet core apis(API1 & API2) that are protected using azure ad b2c. Both these apis are registered on the b2c tenant and have their scopes exposed. We have a client web applicaiton that is to access the above protected apis. This web app has been registered as a applicaiton in b2c tenant and has api permissions set for the above apis with proper scopes defined. We use MSAL.net with a signinpolicy to sign the user in to the web app. the authentication call requires

Calling an Microsoft Graph API for token gives error "AADSTS900144: The request body must contain the following parameter: 'grant_type'

拟墨画扇 提交于 2021-01-20 08:29:22
问题 I am calling a Graph API URL https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token to get an access token but I am getting the following response. { "error": "invalid_request", "error_description": "AADSTS900144: The request body must contain the following parameter: 'grant_type'.\r\nTrace ID: 5ff6b053-9011-4397-89ff-fdb6f31e4600\r\nCorrelation ID: 22509847-199d-4bd8-a083-b29d8bbf3139\r\nTimestamp: 2020-04-01 11:14:00Z", "error_codes": [ 900144 ], "timestamp": "2020-04-01 11:14:00Z",

Calling an Microsoft Graph API for token gives error "AADSTS900144: The request body must contain the following parameter: 'grant_type'

时光怂恿深爱的人放手 提交于 2021-01-20 08:27:38
问题 I am calling a Graph API URL https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token to get an access token but I am getting the following response. { "error": "invalid_request", "error_description": "AADSTS900144: The request body must contain the following parameter: 'grant_type'.\r\nTrace ID: 5ff6b053-9011-4397-89ff-fdb6f31e4600\r\nCorrelation ID: 22509847-199d-4bd8-a083-b29d8bbf3139\r\nTimestamp: 2020-04-01 11:14:00Z", "error_codes": [ 900144 ], "timestamp": "2020-04-01 11:14:00Z",

Service Principal from Terraform not recognized by Azure API

隐身守侯 提交于 2021-01-20 07:54:09
问题 What specific changes need to be made to the syntax below in order for the terraform azurerm provider to be able to authenticate the service principal that will be created using the following code? The Problem A Second Terraform module needs to authenticate to Azure through the azurerm provider with a client_id and client_secret that is created programatically during an earlier, separate process. The provider block in the Second Terraform module looks like: provider "azurerm" { subscription

Service Principal from Terraform not recognized by Azure API

浪尽此生 提交于 2021-01-20 07:53:58
问题 What specific changes need to be made to the syntax below in order for the terraform azurerm provider to be able to authenticate the service principal that will be created using the following code? The Problem A Second Terraform module needs to authenticate to Azure through the azurerm provider with a client_id and client_secret that is created programatically during an earlier, separate process. The provider block in the Second Terraform module looks like: provider "azurerm" { subscription

EF Core DB First, and how to avoid Constructor Overwrite on Model Generation

↘锁芯ラ 提交于 2021-01-19 06:23:20
问题 I am moving away from using SQL Authentication with my Azure DB, to Active Directory Managed Authentication as explained in this article. Basically, I'm doing two main things to get this working. 1- injecting the token in the DBContext constructor: public MyDBContext(DbContextOptions<MyDBContext> options) : base(options) { var conn = (SqlConnection)Database.GetDbConnection(); conn.AccessToken = (new Microsoft.Azure.Services.AppAuthentication.AzureServiceTokenProvider()).GetAccessTokenAsync(

AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: '******-*****-*****-*****-*********'

China☆狼群 提交于 2021-01-13 10:37:50
问题 I am trying to allow o365 login in my Django project using "Django Microsoft Authentication Backend (https://django-microsoft-auth.readthedocs.io/en/latest/)" but I keep getting this error when i try to log in with my microsoft credentials. AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: '******-*****-*****-*****-*********'. I have checked the links i added to my django project and in AAD but cannot figure out the problem PS: i