Questions tagged [azure-active-directory]

Microsoft Azure Active Directory (Microsoft Azure AD) now known as Microsoft Entra ID is a modern developer platform and IAM service that provides identity management and access control capabilities for your cloud applications. It uses industry standard protocols like OAuth2.0, OpenId Connect, and SAML2.0.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

Email claim is not being sent in ID token when Entra ID app is added to another tenant

I'm a developer migrating an application from IdentityServer4 to Entra ID. I successfully setup an app registration for the app's frontend and backend in my organization's Entra ID tenant (domain: ...
UserSpaceMan's user avatar
0 votes
0 answers
6 views

Add API permissions to an app registration from a Bicep file

I'm using a bicep file to deploy an Azure solution composed of several Azure resources. I want to add API permissions to an app registration to allow API calls to ADX and ADT. This is what I followed ...
ValeriaN's user avatar
0 votes
0 answers
7 views

Microsoft Azure portal is having issues getting an authentication token + Difficulty in signing up for Azure of Students

There is this message that pops up every few minutes in my microsoft azure portal: The portal is having issues getting an authentication token. The experience rendered may be degraded. Additional ...
Sharmada S's user avatar
0 votes
0 answers
36 views

Implementing Microsoft Entra ID (OpenID/ Oauth2) in spring framework (non spring boot)

I have a web application in Spring Framework (non-springboot). It has spring security configured in the applicationConfig-security.xml file. <?xml version="1.0" encoding="UTF-8&...
Abdul Waheed's user avatar
0 votes
0 answers
17 views

Azure AKS with Azure B2C

Currently, I am doing some POC with Azure AKS, so the requirement is to integrate Azure AKS with Azure AD (Elantra) as its OIDC Provider for user and identity management. I can find there are some ...
Mahesh's user avatar
  • 550
1 vote
0 answers
39 views

Escape string in a powershell variable [duplicate]

I have a for loop that loops through a list of emails and runs this query against our AzureAD using the filter function from MS docs (https://learn.microsoft.com/en-us/powershell/module/azuread/get-...
BLang's user avatar
  • 970
0 votes
1 answer
46 views

firely - how to connect to Azue Fhir service using a C# console app

I have a .Net 8 console app using C# and am trying to connect to an Azure Fhir service (basic add patient, get patient scenario). The issue is that I can't find any up-to-date/accurate information on ...
AndyW's user avatar
  • 367
0 votes
0 answers
13 views

How to use Microsoft Oauth using firebase

I'm trying to use firebase javascript SDK to authenticate using Microsoft AD/Oauth. I'm attempting to follow the instructions here but I'm running into problems. Right now with the following code ...
Jose's user avatar
  • 10.9k
0 votes
0 answers
24 views

users deleted from tenant not in delta api response

I use https://graph.microsoft.com/v1.0/groups/delta?$filter=id eq '[group-id]' for reading members of a group. I save the users from the group in a cache. On running @odata.deltaLink API, I get ...
user989988's user avatar
  • 3,226
0 votes
0 answers
11 views

read delta link from API to get incremental changes for users

https://graph.microsoft.com/v1.0/users/delta?$select=displayName,givenName,surname Is there a way to get @odata.deltaLink from the above API response without going through all the pages? @odata....
user989988's user avatar
  • 3,226
0 votes
0 answers
20 views

Annotations on the API in SecurityFilterChain are blocked from controller access by swagger, only accepted by postman [closed]

API Java - Spring Boot allows access to controllers via postman, but via swagger not even if both are authenticated with the correct token and validated in Azure Dicretory. When I use annotations of ...
Carlos Henrique's user avatar
1 vote
1 answer
49 views

Flutter Web Azure AD (Entra) authentication with aad_OAuth not working

I currently trying to realize an Azure Active Directory authentication in Flutter Web using the aad_OAuth (v1.0.0, last version) plackage from pub.dev. I just grab the example from the package and ...
Alaindeseine's user avatar
  • 3,433
0 votes
0 answers
12 views

Spring Cloud Azure Ad intercepting Hydra OAuth token and throwing exception Expected BEGIN_OBJECT but was STRING at line 1 column 1 path

We have developed Spring boot application with Azure Ad login and hydra.ory.sh/v1alpha1. Hydra OAuth2 is used for API authentication and User login is authentication via Azure AD. Now the problem is ...
Sathesh S's user avatar
  • 1,273
0 votes
0 answers
20 views

How to Implement Azure Ad Login Mechanism using msal4j with Spring boot application

I would like to connect to Azure AD using client certificate - not secret. I have to implement using msal4j. I tried msal4j with Spring mvc but facing errorpage error while I am redirecting to ...
Mahesh Gawali's user avatar
0 votes
0 answers
60 views

How do I add an on-prem ADConnect synced user attribute as a claim in the ID token of my app in AAD/Entra?

I have an on-prem AD in which I've defined a value against an directory extension property "msDS-cloudExtensionAttribute1" on a user. I've successfully configured ADConnect to synchronise ...
Marcus Shirrefs's user avatar
0 votes
0 answers
40 views

Application cannot load most of the mjs file from @azure/msal-browser @azure/msal-react

I'm trying to implement MSAL login in my React application (React + .Net Core + Electron.Net). I installed @azure/msal-react and @azure/msal-browswer. When trying to run my application, I got errors ...
CnV's user avatar
  • 381
0 votes
1 answer
31 views

How configure to read all user accessible applications via SAML authentication

Created some user groups and assigned users to each group based on user role. I have 'X' - Number of applications, All were configured in Azure AD. Now each application assigned to one or multiple ...
eswarprasad modalavasa's user avatar
0 votes
2 answers
56 views

Trying to connect to AzureAD with PowerShell but getting unknow credential

I can connect to AzureAD using the following command just fine and run queries against AD Connect-AzureAD -Confirm However when i attempt to user the Get-Credential and store it as a variable, it ...
BLang's user avatar
  • 970
0 votes
0 answers
53 views

management.azure.com/providers/Microsoft.Capacity/reservationOrders PassthroughTokenValidationFailed Error

I'm trying to list reservation orders for a dummy customer on microsoft azure portal sandbox. The customer has already an azure plan and a reserved instance subscription. I was able to consent the ...
MAS's user avatar
  • 5
0 votes
1 answer
61 views

calling powerbi api in postman fails

I'm trying to call the powerbi api for a specific dataset, just to prove to myself that i have security set up correctly. Ultimately, I will need to make a DAX query from code but to start, i'm using ...
dot's user avatar
  • 15.2k
0 votes
0 answers
30 views

Why does my AzureAD next-auth provider generate an access token that is encrypted?

I am using next-auth with AzureAD as a provider. This is a snippet of my authOptions export const authOptions: NextAuthOptions = { providers: [ AzureADProvider({ clientId: process.env....
muse98's user avatar
  • 11
0 votes
0 answers
11 views

Doesn't Azure AD have a metadata document that lists the `issuer` for v1 access tokens?

The OpenID Connect metadata document for an Azure tenant is: https://login.microsoftonline.com/<tenant-id>/v2.0/.well-known/openid-configuration It lists the issuer to be https://login....
Shuzheng's user avatar
  • 12k
0 votes
0 answers
9 views

Federated domain user cannot signin to windows laptop

We never had Active Directory setup on-premise, the company Identity provider is Google workspace and since we started using Microsoft services (365 and Azure etc) we federated the Google workspace ...
kachwa's user avatar
  • 51
-1 votes
0 answers
28 views

PL-SQL and Azure key vault

I want to access vault key in azure using PLSQL procedure only. I am not getting any source. Could someone help me in finding or suggest way how can we do so ? I want procedure with steps. EXplain in ...
Adarsh Gupta's user avatar
0 votes
0 answers
19 views

How to setup Claims in Keycloak for different AD

Our application uses KeyCloak to authenticate user. Currently it supports Microsoft. Flow is, our application connects to KeyClock, it has option to Sign in from Microsoft, when clicked -> It ...
RashmiMs's user avatar
  • 139
0 votes
0 answers
25 views

Can Azure AD authentication be used in desktop app

My web application is registered (in App registration) and is authenticated using Azure AD. The web application is also configured to work offline by installing it on the computer - using Windows ...
So25's user avatar
  • 63
0 votes
1 answer
22 views

Is it possible to pass authorized scope 'groups' to an Azure Enterprise OIDC app?

Problem: I am trying to configure my Azure Enterprise OIDC(Azure AD) application to allow me to pass 'groups' as scope(along with 'openid email'). However, currently I am only able to get groups if I ...
Fostah's user avatar
  • 2,947
0 votes
0 answers
35 views

User not allowed by policy conditions - Entra External ID for customers

I am using External ID for my customer tenant, authenticating via an Angular SPA. My setup is identical to what is described in this article: https://learn.microsoft.com/en-us/entra/external-id/...
theblindprophet's user avatar
0 votes
0 answers
28 views

Can you add a custom property\attribute to a Group in AD?

I know that you can add a custom property\attribute to a User in AD, however, is it possible to add a custom property\attribute to a Group? Unfortunately I haven't been able to find any doco\examples ...
PatrickNolan's user avatar
  • 1,751
0 votes
2 answers
57 views

Get incremental changes for users using Graph API

I was going through https://learn.microsoft.com/en-us/graph/delta-query-users?tabs=http What does this mean: When the user is deleted, the item contains an annotation: @removed with value of "...
user989988's user avatar
  • 3,226
0 votes
1 answer
102 views

Securing Spring Boot REST API with AAD and AWS Cognito for different Endpoints

hopefully someone can help me out here, since i cannot find any resources on this topic anywhere. I have got a Spring Boot RestAPI which is currently configured in a way where there are two kinds of ...
Fabian Schmidt's user avatar
0 votes
2 answers
42 views

Azure cli or rest api end to upload custom policy

I am trying to automate the upload of custom policies as I have multiple tenants and each tenant consists of multiple custom policies. I am interested in either Azure cli or SDK for the same. I ...
anujkum's user avatar
  • 131
0 votes
1 answer
30 views

How to add users from one tenant to another tenant without outlook access to accept invitation?

I have a multi-tenant configuration set up in Azure. In my main tenant, there is a security policy in place that restricts the access to the portal to only users that don't have an E1 license and ...
Radu's user avatar
  • 21
1 vote
1 answer
46 views

"Insufficient privileges to complete the operation" on EmployeeExperience.LearningProviders.GetAsync()

I need to get (and eventually create) the LearningProvider(s) in a certain Azure Tenant. The creation is done by this call in C#: var options = new OnBehalfOfCredentialOptions { ...
RiccardoB's user avatar
  • 163
0 votes
0 answers
53 views

AADSTS50011: The redirect URI mismatch error with HTTP

From our Business central test environment, we are trying to communicate to Azure AD. So while giving grant consent it is trying to authenticate but finally getting this error I tried to copy-paste ...
SFDC-Beginner's user avatar
0 votes
0 answers
22 views

Blazor Wasm: NavigateToLogout and passing extra parameters

According to the docs, you can use an InteractiveRequestOptions instance to pass additional parameters during the login. Is there a way to do something similar during the logout process (in this case, ...
Luis Abreu's user avatar
  • 4,130
0 votes
0 answers
42 views

msal-react/browser doesn't initiate login when deployed, works fine locally

I have a React app that uses msal-browser & msal-react. I begin to experience issues when my app is deployed (via Azure Web App, Azure Static Web App, and the Azure Static Web App CLI locally). ...
CrackerBarrelKid55's user avatar
-1 votes
1 answer
51 views

Azure Portal - Issue in accessing user details using graph api via Role assignment to app

Usecase: Graph API should be able to access only 1 group and only its users. Issue: Using steps mentioned below, usecase is working fine at group level, i.e, graph API only has access to this group ...
Curiousreed's user avatar
0 votes
0 answers
35 views

Azure Graph API - Multiple web platforms redirect URL not working

I am working with Azure Graph API and it works well when I configure only one web platform having one redirect URL. When I add multiple Web platforms and having multiple redirect URLs, it always ...
Waqar Ali Saleemi's user avatar
2 votes
1 answer
70 views

Authenticate HubConnection in Blazor Server with Microsoft Identity platform

I'm having a Blazor server project (NET 8.0) with Microsoft Identity platform as Authentication set up. Now I want to implement a chat function with a HubConnection like so: protected override async ...
bbWebDev's user avatar
0 votes
1 answer
95 views
+50

Azure active directory authentication with managed identities and function app api's

I am building salesforce marketing cloud custom activity (a javascript/express application) hosted on Azure app service. I've enabled the system to assign a managed identity to it. Now I want to ...
Ashwin J's user avatar
  • 622
0 votes
1 answer
65 views

How to download OneDrive files using Node JS

In our team, a person has uploaded a lot of files in his OneDrive folder. He has shared the links with me and I can access the files from my account. Now I want to download all the files and store ...
Sajib Hossain's user avatar
0 votes
2 answers
28 views

GraphClient Business Account OnBehalfOfCredential authentication failed

I wish you all a wonderfull day. I'm using Graph Client on .Net Core to authenticate user and initialize graph client service to get user's calendar and profile informations with OnBehalfOfCredentials ...
EmreGundogdu's user avatar
0 votes
2 answers
62 views

.NET Core 8 Azure AD validation generates The signature is invalid

When using .NET 7 the code below runs well during bearer token validation. Unfortunately, when my Web API application is upgraded to version 8 this code doesn't run well and generates this error ...
derodevil's user avatar
  • 878
0 votes
0 answers
46 views

Azure SQL Contained Users Permission Propagation Time

To assign Azure SQL database permissions for my users, I add them to an Entra ID group, and then create a contained user for the group in the database and then add the roles as follows: CREATE USER [...
woozy's user avatar
  • 33
0 votes
0 answers
50 views

Write a log to Azure Application Insights while being authenticated by a AAD Token [closed]

From a C# WinForm application I would like to be able to use Application Insights to log the App's telemetry events. However, I would like to be able to authenticate to the service neither by using an ...
Marc Alves's user avatar
0 votes
1 answer
86 views

Use Python to call SharePoint API get 401 response while I have the token

I have registered my App in Azure with API permission as below: Here is my python code. import requests from msal import ConfidentialClientApplication client_id = "xxxxxxxxxxxxxxxxxxxxx" ...
Mark's user avatar
  • 307
0 votes
0 answers
32 views

AZURE modify JWT token fields

We have two applications: Application A and Application B We are creating token by calling https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token endpoint with credentials from ...
Oleksandr Prudnikov's user avatar
0 votes
1 answer
55 views

Azure Storage account role - DTBUtil_Container_StorageV2

I am working on an Azure Data Lake Storage Gen2 (ADLSGen2) account. Inside Azure Portal, in the Access Control (IAM) section of this storage account, I see a Principal by the name ...
nam's user avatar
  • 22.7k
0 votes
1 answer
28 views

Azure B2C - Multiple accounts created with external identity providers with same email

I have an application with Azure B2C for user identity, and I have also configured login via Facebook. Logging in via Facebook creates a new account, even if the email was previously used to register ...
Mahatma Gandhi's user avatar

1
2 3 4 5
359