azure-active-directory

How to get a token for downstream service in AAD

拟墨画扇 提交于 2020-01-24 11:32:54
问题 I have an MVC application in which I use OpenIdConnectAuthenticationMiddleware to authenticate the user against AAD. This MVC application uses a few backend services that require the user's authentication context. If I register these services separately in AAD, I can get a token for them using AuthenticationContext.AcquireTokenSilentAsync . But registering these services separately with AAD seems wrong as they would require the user to consent to them separately (they are really part of the

Angular SPA adal login calls Azure AD and reply URL, but doesn't return userInfo or isAuthenticated

久未见 提交于 2020-01-24 10:50:26
问题 I'm hoping to use Azure's Active Directory Service for authentication as part of an Angular SPA. To that end, I am trying to use Active Directory Authentication Library (ADAL) for JavaScript. But while it seems to correctly redirect to login services and, after credential entry, returns to the Reply URL, I am not able to get userInfo.isAuthenticated (userInfo is empty) within my controller. How would I go about debugging why authentication doesn't appear to be finishing? The following is my

Angular SPA adal login calls Azure AD and reply URL, but doesn't return userInfo or isAuthenticated

一曲冷凌霜 提交于 2020-01-24 10:50:07
问题 I'm hoping to use Azure's Active Directory Service for authentication as part of an Angular SPA. To that end, I am trying to use Active Directory Authentication Library (ADAL) for JavaScript. But while it seems to correctly redirect to login services and, after credential entry, returns to the Reply URL, I am not able to get userInfo.isAuthenticated (userInfo is empty) within my controller. How would I go about debugging why authentication doesn't appear to be finishing? The following is my

How to find Audience field for Active Directory OAuth Authentication? (How to send a post request to DevOps from Azure Logic App?)

被刻印的时光 ゝ 提交于 2020-01-24 09:38:24
问题 Please help me with this problem. I'm trying to send a post request from Azure Logic App to the DevOps to create a release. I created an http action in my Logic App, This is the uri for creating a release: https://vsrm.dev.azure.com/{organization}/{project}/_apis/release/releases?api-version=5.0 I'm using Active Directory OAuth for authentication, which I need to provide tenant, client id, audience and secret. I'm using tenant, client id and secret of my application in Azure Active Directory,

Read Azure AD login user details in ASP.net

会有一股神秘感。 提交于 2020-01-23 17:43:29
问题 I'm implementing Azure AD login in asp.net (VS 2013).. I have successfully created sign-in in and sign-out parts.. My sign -in and sign-out methods are like below. public partial class Startup { private static string clientId = ConfigurationManager.AppSettings["ida:ClientId"]; private static string aadInstance = ConfigurationManager.AppSettings["ida:AADInstance"]; private static string tenant = ConfigurationManager.AppSettings["ida:Tenant"]; private static string postLogoutRedirectUri =

Is it possible to disable AAD Auth on specific Azure functions?

夙愿已清 提交于 2020-01-23 16:48:45
问题 Background: I have an Azure Function App deployed with App Service Authentication (easyauth) enabled using AAD, hooked up to an Azure AD B2C tenant. It's all working great and as expected. That said I have encountered a new scenario that I'd like to support with the same function app but without the auth turned on. Specifically I'd like one specific function to be called anonymously (perhaps even behind a function proxy). Question: Is it possible to disable auth on a specific function in the

Use Windows Azure Active Directory to register new users for MVC 4 website

為{幸葍}努か 提交于 2020-01-23 08:35:46
问题 I'm trying to use Windows Azure Active Directory as an Identity Provider for my MVC 4 app and need to figure out how to implement a user registration functionality. I know that Graph API can be used for updating WAAD. However, from reading http://msdn.microsoft.com/en-us/library/windowsazure/dn151791.aspx I've got a sense that, in order to use Graph API, a user has to be authenticated through WAAD first. Only then will he receive a token to be used with Graph API. But what if I have an

Use Windows Azure Active Directory to register new users for MVC 4 website

核能气质少年 提交于 2020-01-23 08:33:29
问题 I'm trying to use Windows Azure Active Directory as an Identity Provider for my MVC 4 app and need to figure out how to implement a user registration functionality. I know that Graph API can be used for updating WAAD. However, from reading http://msdn.microsoft.com/en-us/library/windowsazure/dn151791.aspx I've got a sense that, in order to use Graph API, a user has to be authenticated through WAAD first. Only then will he receive a token to be used with Graph API. But what if I have an

Are the Azure Client Id, Tenant, and Key Vault URI considered secrets?

随声附和 提交于 2020-01-23 07:54:42
问题 I'm getting up to speed with Azure and trying to follow best practices for securing my WPF and Xamarin.Forms apps. I'm using Azure AD for authentication and Key Vault for my secrets. What about my Client Id and Tenant settings? These are required to make the initial connection to Azure to log in. The endpoint URI is also required to make a call to the Key Vault. Are the Client Id, Tenant, Key Vault endpoint considered secrets or am I over thinking this. I understand without authenticating, no

Are the Azure Client Id, Tenant, and Key Vault URI considered secrets?

人盡茶涼 提交于 2020-01-23 07:54:08
问题 I'm getting up to speed with Azure and trying to follow best practices for securing my WPF and Xamarin.Forms apps. I'm using Azure AD for authentication and Key Vault for my secrets. What about my Client Id and Tenant settings? These are required to make the initial connection to Azure to log in. The endpoint URI is also required to make a call to the Key Vault. Are the Client Id, Tenant, Key Vault endpoint considered secrets or am I over thinking this. I understand without authenticating, no