azure-active-directory

问题 I am working on a notification only teams bot limited to members of a single azure ad tenant. Based on this documentation - https://docs.microsoft.com/en-us/microsoftteams/platform/resources/bot-v3/bots-context - the serviceUrl could change. Since the bot would hardly ever receive a request, how do I manage the serviceUrl? What could cause the serviceUrl to change? 回答1: Service URL are unique to region, not tenant. You can cache the team and user details when bot is added to a team in

问题 I am working on a notification only teams bot limited to members of a single azure ad tenant. Based on this documentation - https://docs.microsoft.com/en-us/microsoftteams/platform/resources/bot-v3/bots-context - the serviceUrl could change. Since the bot would hardly ever receive a request, how do I manage the serviceUrl? What could cause the serviceUrl to change? 回答1: Service URL are unique to region, not tenant. You can cache the team and user details when bot is added to a team in

问题 This situation made me create a real monstrous work-around, but sometimes, you don't have an option right? The problem is basically bumping into 503: 'serviceUnavailable' messages when several (specific?) Azure AD Application permissions are set in your Azure AD Application, which should not happen. Context and technical queries The context is specifically for Application permissions (app-only auth) and NOT delegated permissions. Token is retrieved by: HTTP POST https://login.microsoftonline

问题 I am attempting to retrieve some very basic information from Azure B2C, using the Built-In User Attributes and Claims. I merely want to return Given Name Surname UserId Email Its not totally obvious (to me) how B2C is storing this content... The SignIn/SignOut Policy (User Attirubtes) displays Email Address as a string but the SignIn/SignOut Policy (Application Claims) displays Email Addresses as a stringCollection Using the below code, I am attempting to return the 4 above Claims but only

问题 Closed. This question is not reproducible or was caused by typos. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed last month . Improve this question I set an azure ad admin (global admin) for our azure sql server, now i tried to grant a ad user access to the sql database. I followed the instructions in this video https://www.youtube.com/watch?v=pEPyPsGEevw, because i didn't found a better explenation. As

问题 Closed. This question is not reproducible or was caused by typos. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed last month . Improve this question I set an azure ad admin (global admin) for our azure sql server, now i tried to grant a ad user access to the sql database. I followed the instructions in this video https://www.youtube.com/watch?v=pEPyPsGEevw, because i didn't found a better explenation. As

问题 I have seen many threads on exporting groups and getting members, but strangely not both. Basically I need a .csv file or similar with every AD group and it's corresponding members. I believe it needs to be done from Azure as we have multiple domains and Office 365/incloud groups (Azure AD has all of these listed). So I don't think there is another way to export our groups to a single csv file. 回答1: This PowerShell should return you what you are looking for in csv format (one line for each

问题 I have seen many threads on exporting groups and getting members, but strangely not both. Basically I need a .csv file or similar with every AD group and it's corresponding members. I believe it needs to be done from Azure as we have multiple domains and Office 365/incloud groups (Azure AD has all of these listed). So I don't think there is another way to export our groups to a single csv file. 回答1: This PowerShell should return you what you are looking for in csv format (one line for each

问题 I have to handle multiple login pages/applications which need to redirect to a common landing page index.html and need to access custom string to identify the requested application. The token generation endpoint is common for all login pages. Scenario : I have multiple login pages 1: Login1.html 2: Login2.html Token generation endpoint will be same for both logins page. After successful authentication from Azure AD B2C application it will redirect to a common landing page 'http://localhost

问题 I am building an application which has a front-end (a SPA built with Vue.js) which interfaces to a couple json-based Web APIs in the back end (hosted in Azure). The Web APIs need to be secured via Azure Active Directory and users must be a member of a security group. Furthermore, the SPA should simply try to force the user to sign into an approved account if they are not signed in as one (i.e. just auto-redirect). I actually have all this working. The AAD application has Group.Read.All, the