I have a fairly standard setup that involves an ASP.NET Core app that is hosted by an Azure App Service, proxied through Cloudflare. This extension method is called after the usual boilerplate ASP.NET Core identity code, which also configures cookies:…
I'm trying to authenticate to an Azure AD Application using ClientCertificateCredential (in C#): using Azure.Identity; var credential = new ClientCertificateCredential("TenantId", "AppId", @"pathtocert.pfx"); on the application, I had configured the certificate's SNI as a trusted certificated: "trustedCertificateSubjects": [ { "authorityId": "auth…
I am trying to set up SSO with a Blazor WebAssmebly app (.NET 7). On the Azure AD side of things, I have registered an application (SPA) with a login callback URI of https://localhost/authentication/login-callback . I have disabled implicit and…
I have a multi tenant app running and received a request from a "customer" where he claims that he never gave consent to my terms of service and privacy statement. While I claimed that since the beginning the two fields…
I have an azure function to read and update the cosmos document . I enabled the identity and assigned the following roles to azure function identity(service principal). Somehow I'm seeing the following exception. Could you please let me know the…
I want to fetch the Access Token from AAD application using below snippet. var tokenCredential = new DefaultAzureCredential(); var accessToken = await tokenCredential.GetTokenAsync( new TokenRequestContext(scopes: new string[] { ResourceId + "/.default" }) { } ); I have created AAD application…
When i trying to run command az ad sp create-for-rbac --role="Contributor" --scopes="/subscription/<<Subscription ID>>" I am getting error as (MissingSubscription) The request did not have a subscription or a valid tenant level resource provider. Code: MissingSubscription Message: The request did not…
I have an angular frontend and a laravel api backend on different domains using username/password login with jwt token. I have integrated Microsoft Azure AD login with oauth using the following: I have registered the app in Azure, specified my…
Use Case - Automate assigning Microsoft Graphs's User.Read.All permission to App Registration/Service Principal using DevOps pipeline. So that applications can read user profiles. Challenge To grant Microsoft Graphs's User.Read.All permission, service principal under which pipeline will run, requires Global Administrator…
My application uses Azure AD to login and that part works fine. Now I want to give users access to different parts of the application by there AD Groups. How can I do that? And is it possible to not…