Questions tagged [azure-active-directory]
Microsoft Azure Active Directory (Microsoft Azure AD) now known as Microsoft Entra ID is a modern developer platform and IAM service that provides identity management and access control capabilities for your cloud applications. It uses industry standard protocols like OAuth2.0, OpenId Connect, and SAML2.0.
17,923
questions
0
votes
0
answers
9
views
Email claim is not being sent in ID token when Entra ID app is added to another tenant
I'm a developer migrating an application from IdentityServer4 to Entra ID. I successfully setup an app registration for the app's frontend and backend in my organization's Entra ID tenant (domain: ...
0
votes
0
answers
6
views
Add API permissions to an app registration from a Bicep file
I'm using a bicep file to deploy an Azure solution composed of several Azure resources. I want to add API permissions to an app registration to allow API calls to ADX and ADT. This is what I followed ...
0
votes
0
answers
7
views
Microsoft Azure portal is having issues getting an authentication token + Difficulty in signing up for Azure of Students
There is this message that pops up every few minutes in my microsoft azure portal:
The portal is having issues getting an authentication token. The experience rendered may be degraded.
Additional ...
0
votes
0
answers
36
views
Implementing Microsoft Entra ID (OpenID/ Oauth2) in spring framework (non spring boot)
I have a web application in Spring Framework (non-springboot). It has spring security configured in the applicationConfig-security.xml file.
<?xml version="1.0" encoding="UTF-8&...
0
votes
0
answers
17
views
Azure AKS with Azure B2C
Currently, I am doing some POC with Azure AKS, so the requirement is to integrate Azure AKS with Azure AD (Elantra) as its OIDC Provider for user and identity management.
I can find there are some ...
1
vote
0
answers
39
views
Escape string in a powershell variable [duplicate]
I have a for loop that loops through a list of emails and runs this query against our AzureAD using the filter function from MS docs (https://learn.microsoft.com/en-us/powershell/module/azuread/get-...
0
votes
1
answer
46
views
firely - how to connect to Azue Fhir service using a C# console app
I have a .Net 8 console app using C# and am trying to connect to an Azure Fhir service (basic add patient, get patient scenario).
The issue is that I can't find any up-to-date/accurate information on ...
0
votes
0
answers
13
views
How to use Microsoft Oauth using firebase
I'm trying to use firebase javascript SDK to authenticate using Microsoft AD/Oauth.
I'm attempting to follow the instructions here but I'm running into problems. Right now with the following code
...
0
votes
0
answers
24
views
users deleted from tenant not in delta api response
I use https://graph.microsoft.com/v1.0/groups/delta?$filter=id eq '[group-id]' for reading members of a group. I save the users from the group in a cache.
On running @odata.deltaLink API, I get ...
0
votes
0
answers
11
views
read delta link from API to get incremental changes for users
https://graph.microsoft.com/v1.0/users/delta?$select=displayName,givenName,surname
Is there a way to get @odata.deltaLink from the above API response without going through all the pages? @odata....
0
votes
0
answers
20
views
Annotations on the API in SecurityFilterChain are blocked from controller access by swagger, only accepted by postman [closed]
API Java - Spring Boot allows access to controllers via postman, but via swagger not even if both are authenticated with the correct token and validated in Azure Dicretory.
When I use annotations of ...
1
vote
1
answer
49
views
Flutter Web Azure AD (Entra) authentication with aad_OAuth not working
I currently trying to realize an Azure Active Directory authentication in Flutter Web using the aad_OAuth (v1.0.0, last version) plackage from pub.dev.
I just grab the example from the package and ...
0
votes
0
answers
12
views
Spring Cloud Azure Ad intercepting Hydra OAuth token and throwing exception Expected BEGIN_OBJECT but was STRING at line 1 column 1 path
We have developed Spring boot application with Azure Ad login and hydra.ory.sh/v1alpha1. Hydra OAuth2 is used for API authentication and User login is authentication via Azure AD.
Now the problem is ...
0
votes
0
answers
20
views
How to Implement Azure Ad Login Mechanism using msal4j with Spring boot application
I would like to connect to Azure AD using client certificate - not secret.
I have to implement using msal4j.
I tried msal4j with Spring mvc but facing errorpage error while I am redirecting to ...
0
votes
0
answers
60
views
How do I add an on-prem ADConnect synced user attribute as a claim in the ID token of my app in AAD/Entra?
I have an on-prem AD in which I've defined a value against an directory extension property "msDS-cloudExtensionAttribute1" on a user.
I've successfully configured ADConnect to synchronise ...
0
votes
0
answers
40
views
Application cannot load most of the mjs file from @azure/msal-browser @azure/msal-react
I'm trying to implement MSAL login in my React application (React + .Net Core + Electron.Net). I installed @azure/msal-react and @azure/msal-browswer. When trying to run my application, I got errors ...
0
votes
1
answer
31
views
How configure to read all user accessible applications via SAML authentication
Created some user groups and assigned users to each group based on user role. I have 'X' - Number of applications, All were configured in Azure AD. Now each application assigned to one or multiple ...
0
votes
2
answers
56
views
Trying to connect to AzureAD with PowerShell but getting unknow credential
I can connect to AzureAD using the following command just fine and run queries against AD
Connect-AzureAD -Confirm
However when i attempt to user the Get-Credential and store it as a variable, it ...
0
votes
0
answers
53
views
management.azure.com/providers/Microsoft.Capacity/reservationOrders PassthroughTokenValidationFailed Error
I'm trying to list reservation orders for a dummy customer on microsoft azure portal sandbox.
The customer has already an azure plan and a reserved instance subscription.
I was able to consent the ...
0
votes
1
answer
61
views
calling powerbi api in postman fails
I'm trying to call the powerbi api for a specific dataset, just to prove to myself that i have security set up correctly.
Ultimately, I will need to make a DAX query from code but to start, i'm using ...
0
votes
0
answers
30
views
Why does my AzureAD next-auth provider generate an access token that is encrypted?
I am using next-auth with AzureAD as a provider. This is a snippet of my authOptions
export const authOptions: NextAuthOptions = {
providers: [
AzureADProvider({
clientId: process.env....
0
votes
0
answers
11
views
Doesn't Azure AD have a metadata document that lists the `issuer` for v1 access tokens?
The OpenID Connect metadata document for an Azure tenant is:
https://login.microsoftonline.com/<tenant-id>/v2.0/.well-known/openid-configuration
It lists the issuer to be https://login....
0
votes
0
answers
9
views
Federated domain user cannot signin to windows laptop
We never had Active Directory setup on-premise, the company Identity provider is Google workspace and since we started using Microsoft services (365 and Azure etc) we federated the Google workspace ...
-1
votes
0
answers
28
views
PL-SQL and Azure key vault
I want to access vault key in azure using PLSQL procedure only. I am not getting any source. Could someone help me in finding or suggest way how can we do so ?
I want procedure with steps. EXplain in ...
0
votes
0
answers
19
views
How to setup Claims in Keycloak for different AD
Our application uses KeyCloak to authenticate user. Currently it supports Microsoft.
Flow is, our application connects to KeyClock, it has option to Sign in from Microsoft,
when clicked -> It ...
0
votes
0
answers
25
views
Can Azure AD authentication be used in desktop app
My web application is registered (in App registration) and is authenticated using Azure AD.
The web application is also configured to work offline by installing it on the computer - using Windows ...
0
votes
1
answer
22
views
Is it possible to pass authorized scope 'groups' to an Azure Enterprise OIDC app?
Problem: I am trying to configure my Azure Enterprise OIDC(Azure AD) application to allow me to pass 'groups' as scope(along with 'openid email'). However, currently I am only able to get groups if I ...
0
votes
0
answers
35
views
User not allowed by policy conditions - Entra External ID for customers
I am using External ID for my customer tenant, authenticating via an Angular SPA.
My setup is identical to what is described in this article: https://learn.microsoft.com/en-us/entra/external-id/...
0
votes
0
answers
28
views
Can you add a custom property\attribute to a Group in AD?
I know that you can add a custom property\attribute to a User in AD, however, is it possible to add a custom property\attribute to a Group? Unfortunately I haven't been able to find any doco\examples ...
0
votes
2
answers
57
views
Get incremental changes for users using Graph API
I was going through https://learn.microsoft.com/en-us/graph/delta-query-users?tabs=http
What does this mean:
When the user is deleted, the item contains an annotation: @removed with value of "...
0
votes
1
answer
102
views
Securing Spring Boot REST API with AAD and AWS Cognito for different Endpoints
hopefully someone can help me out here, since i cannot find any resources on this topic anywhere.
I have got a Spring Boot RestAPI which is currently configured in a way where there are two kinds of ...
0
votes
2
answers
42
views
Azure cli or rest api end to upload custom policy
I am trying to automate the upload of custom policies as I have multiple tenants and each tenant consists of multiple custom policies.
I am interested in either Azure cli or SDK for the same. I ...
0
votes
1
answer
30
views
How to add users from one tenant to another tenant without outlook access to accept invitation?
I have a multi-tenant configuration set up in Azure. In my main tenant, there is a security policy in place that restricts the access to the portal to only users that don't have an E1 license and ...
1
vote
1
answer
46
views
"Insufficient privileges to complete the operation" on EmployeeExperience.LearningProviders.GetAsync()
I need to get (and eventually create) the LearningProvider(s) in a certain Azure Tenant.
The creation is done by this call in C#:
var options = new OnBehalfOfCredentialOptions
{
...
0
votes
0
answers
53
views
AADSTS50011: The redirect URI mismatch error with HTTP
From our Business central test environment, we are trying to communicate to Azure AD. So while giving grant consent it is trying to authenticate but finally getting this error
I tried to copy-paste ...
0
votes
0
answers
22
views
Blazor Wasm: NavigateToLogout and passing extra parameters
According to the docs, you can use an InteractiveRequestOptions instance to pass additional parameters during the login. Is there a way to do something similar during the logout process (in this case, ...
0
votes
0
answers
42
views
msal-react/browser doesn't initiate login when deployed, works fine locally
I have a React app that uses msal-browser & msal-react. I begin to experience issues when my app is deployed (via Azure Web App, Azure Static Web App, and the Azure Static Web App CLI locally). ...
-1
votes
1
answer
51
views
Azure Portal - Issue in accessing user details using graph api via Role assignment to app
Usecase: Graph API should be able to access only 1 group and only its users.
Issue: Using steps mentioned below, usecase is working fine at group level, i.e, graph API only has access to this group ...
0
votes
0
answers
35
views
Azure Graph API - Multiple web platforms redirect URL not working
I am working with Azure Graph API and it works well when I configure only one web platform having one redirect URL.
When I add multiple Web platforms and having multiple redirect URLs, it always ...
2
votes
1
answer
70
views
Authenticate HubConnection in Blazor Server with Microsoft Identity platform
I'm having a Blazor server project (NET 8.0) with Microsoft Identity platform as Authentication set up. Now I want to implement a chat function with a HubConnection like so:
protected override async ...
0
votes
1
answer
95
views
+50
Azure active directory authentication with managed identities and function app api's
I am building salesforce marketing cloud custom activity (a javascript/express application) hosted on Azure app service. I've enabled the system to assign a managed identity to it. Now I want to ...
0
votes
1
answer
65
views
How to download OneDrive files using Node JS
In our team, a person has uploaded a lot of files in his OneDrive folder. He has shared the links with me and I can access the files from my account. Now I want to download all the files and store ...
0
votes
2
answers
28
views
GraphClient Business Account OnBehalfOfCredential authentication failed
I wish you all a wonderfull day.
I'm using Graph Client on .Net Core to authenticate user and initialize graph client service to get user's calendar and profile informations with OnBehalfOfCredentials ...
0
votes
2
answers
62
views
.NET Core 8 Azure AD validation generates The signature is invalid
When using .NET 7 the code below runs well during bearer token validation. Unfortunately, when my Web API application is upgraded to version 8 this code doesn't run well and generates this error ...
0
votes
0
answers
46
views
Azure SQL Contained Users Permission Propagation Time
To assign Azure SQL database permissions for my users, I add them to an Entra ID group, and then create a contained user for the group in the database and then add the roles as follows:
CREATE USER [...
0
votes
0
answers
50
views
Write a log to Azure Application Insights while being authenticated by a AAD Token [closed]
From a C# WinForm application I would like to be able to use Application Insights to log the App's telemetry events.
However, I would like to be able to authenticate to the service neither by using an ...
0
votes
1
answer
86
views
Use Python to call SharePoint API get 401 response while I have the token
I have registered my App in Azure with API permission as below:
Here is my python code.
import requests
from msal import ConfidentialClientApplication
client_id = "xxxxxxxxxxxxxxxxxxxxx"
...
0
votes
0
answers
32
views
AZURE modify JWT token fields
We have two applications: Application A and Application B
We are creating token by calling https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token endpoint with credentials from ...
0
votes
1
answer
55
views
Azure Storage account role - DTBUtil_Container_StorageV2
I am working on an Azure Data Lake Storage Gen2 (ADLSGen2) account. Inside Azure Portal, in the Access Control (IAM) section of this storage account, I see a Principal by the name ...
0
votes
1
answer
28
views
Azure B2C - Multiple accounts created with external identity providers with same email
I have an application with Azure B2C for user identity, and I have also configured login via Facebook.
Logging in via Facebook creates a new account, even if the email was previously used to register ...