azure-active-directory

问题 I have an .Net core 3.1 web application where I implemented AD Authentication by setting up the App Services registration in Azure and also assigned users. Now when an unauthorized user tries to access the application, AD authentication is failing and going to OPENIDConnect Exception page. But All I need is to navigate user to custom page AccessDenied page in my application. Expected: When User is not Authenticated. He should be navigate to /Home/AccessDeined Page. Actual: Exception Page:

问题 I have an .Net core 3.1 web application where I implemented AD Authentication by setting up the App Services registration in Azure and also assigned users. Now when an unauthorized user tries to access the application, AD authentication is failing and going to OPENIDConnect Exception page. But All I need is to navigate user to custom page AccessDenied page in my application. Expected: When User is not Authenticated. He should be navigate to /Home/AccessDeined Page. Actual: Exception Page:

问题 I need to register a native app on Azure Active Directory using the AZ Powershell 6 Module. A native app can be registered with the command New-AzureADApplication in the AzureAD module setting the value of the field "PublicClient" to true, but the module AzureAD is not supported for powershell 6. In powershell 6 it seems that the corresponding command is New-AzADApplication, which allows to register a Web app / API but not a native app. So how is it possible to register a native app with the

问题 Some background info: I'm working on a two-factor authentication solution for some API by using Azure AD encoded api key I'm able to get a valid access token pogrammatically to be used as authorization bearer token on the header request. Unfortunately, the API expects the 2) encoded api key to be delivered through the authorizaton field, and as such, I'm expected to use the pass AAD auth through a cookie instead. If I direct chrome to my api and log in normally while capturing the traffic, I

问题 For one of my dashboards I want to show the user their profile picture for obvious personalisation reasons, and offer them the possibility to change it. Most blog posts and articles on the Microsoft Docs site name a variety of endpoints I can leverage to get this data, but I'm just unable to get this to work with a simple postman call. Since I can't even get the photo, I wouldn't know how to change (update) it either. The following endpoints don't work: GET https://graph.microsoft.com/beta

问题 For one of my dashboards I want to show the user their profile picture for obvious personalisation reasons, and offer them the possibility to change it. Most blog posts and articles on the Microsoft Docs site name a variety of endpoints I can leverage to get this data, but I'm just unable to get this to work with a simple postman call. Since I can't even get the photo, I wouldn't know how to change (update) it either. The following endpoints don't work: GET https://graph.microsoft.com/beta

问题 Ive set up my AzureAD in the portal, and an appservice that uses the AD to authenticate following instructions from microsoft. Ive made a .net core app that uses this authorisation. It works on my localhost. But when i publish it i get this error AADSTS50011: The reply url specified in the request does not match the reply urls configured for the application: '614f66a9-xxxx-483a-8bc7-xxxxxxx' What should i change and how come it works in my local but not when published? This is current

问题 problem statement currently, I am in the process to create/modify azure resources in the different subscription with the help of azure terraform. error Principal <appid> does not exist in the directory {destination-tenant-id-for which contribution role required} consider the following scenario. we want to create Azure AKS cluster in one subscription and in same execution, we want to update DNS define in another subscription. this process works well if we are having both i.e. DNS zone and aks

问题 problem statement currently, I am in the process to create/modify azure resources in the different subscription with the help of azure terraform. error Principal <appid> does not exist in the directory {destination-tenant-id-for which contribution role required} consider the following scenario. we want to create Azure AKS cluster in one subscription and in same execution, we want to update DNS define in another subscription. this process works well if we are having both i.e. DNS zone and aks

问题 I am trying to use PHP and CURL to connect to Microsoft Dynamics API so I can read client data from the CRM. The API guide can be found here: https://msdn.microsoft.com/en-gb/library/mt593051.aspx I've been into the Azure portal and set up a new application, and it gives me the credentials to use (client id, secret, etc.) and the url end points. Using these credentials I am able to successfully connect to the CRM and retrieve a bearer access token, but I am unable to get any further. When I