Questions tagged [azure-active-directory]

Microsoft Azure Active Directory (Microsoft Azure AD) now known as Microsoft Entra ID is a modern developer platform and IAM service that provides identity management and access control capabilities for your cloud applications. It uses industry standard protocols like OAuth2.0, OpenId Connect, and SAML2.0.

azure-active-directory
Filter by
Sorted by
Tagged with
0 votes
1 answer
50 views

Microsoft Entra ID - How to delete a tenant?

I am trying to delete a tenant that was created in 2020. I am stuck on this screen. There are no LinkedIn applications or license based subscriptions. This was trial that has long expired. So how do ...
abhi's user avatar
  • 3,127
-1 votes
0 answers
29 views

Azure AD guest account in web app authentication user claims data

I have tenant A and tenant B. I have user in tenant A who is also a guest user in tenant B. In tenant B I have ASP.NET Core Blazor Server application with authentication registered for single ...
Colpe's user avatar
  • 1
0 votes
0 answers
38 views

Handling errors in MSAL Redirect - reactjs login with microsoft sso

We are currently trying to catch an error, when a user with a company Azure AD Account tries to access the application, but does not have access to the tenant where the application resides (Multi-...
Special Code Capm's user avatar
0 votes
1 answer
34 views

Azure Cross Cloud Auth using AAD

I'm trying to move non sensitive data from Azure Government Cloud to Public cloud. I read through links and understood AAD auth works for cross tenant access. I couldn't find anything on the cross ...
DxG's user avatar
  • 189
-2 votes
1 answer
64 views

Get id token from the access token

I use angular with spring boot Actually angular app send me the bearer token (access token) to the spring boot (backend end). With this token is it possible to get the id token?
robert trudel's user avatar
0 votes
1 answer
92 views

Microsoft Identity does not work in docker desktop

Problem : Microsoft Identity does not work in docker desktop I am able to reproduce it in a sample demo project. I created a simple ASP.Net Web API which uses Microsoft Identity for Auth. After ...
Ajey Joshi's user avatar
0 votes
1 answer
80 views

how to get refresh token in msal-browser Azure AD B2C login?

we have used msal-browser for Azure AD B2C login in the react application with vite & RTK. We want to refresh the token once the main access token expires. But inside the react application, we ...
bhavik-civica's user avatar
0 votes
1 answer
37 views

How can I add an identity provider to an existing user in an AWS Cognito user pool using the OIDC protocol?

Problem Description: I'm encountering challenges when attempting to add an identity provider (IdP) to an existing user in an AWS Cognito user pool using the OIDC (OpenID Connect) protocol. Symptoms: ...
Prakash Mishra's user avatar
0 votes
0 answers
39 views

Azure B2C MFA custom policy flow 'try another way'

is there an example of using a custom policy to allow 'try another way'. Scenario is TOTP primary with Email as an alternative MFA flow. If the user doesn't have their phone for TOTP, they can use ...
Seb's user avatar
  • 1
0 votes
1 answer
36 views

How can I protect an Java Spring boot API against Azure AD B2C if I only have an id_token?

I am trying to protect an API against Azure AD B2C based on the following scenario As you can see, the flow is as follows: 1.- A user puts its credentials in a login page of a web application 2.- The ...
Martinsiyo's user avatar
0 votes
1 answer
57 views

Is there any way to get a new Azure CLI token without logging out?

I have a system where the client is using the Azure CLI token to do AA against a service. the service parses the JWT bearer token obtained send in the authorization header by the client. The server ...
simpleCoder's user avatar
0 votes
1 answer
75 views

Code a Delegated Permission in Azure Powershell

Can anyone give me an example of coding a delegated permission to an application in Azure Powershell? The image below shows an example of how I would like the permissions to look like. I know I ...
Harry's user avatar
  • 39
0 votes
1 answer
74 views

Service Principals I create are not being created as mine

I've executed the code below to create a service principal and then list all of my service principals. However, the service principal I just created is not listed.
kevin's user avatar
  • 428
0 votes
1 answer
46 views

Azure Function: "Access Token missing or malformed" when using Graph API

I am working on an Azure Function that interacts with the Azure Active Directory Graph API (@azure/graph). The function API is designed to verify if an email is registered and verified in Azure AD(...
Snooper_A's user avatar
  • 107
-1 votes
1 answer
37 views

Allowing any member of a dynamic group to send as from a shared mailbox

We are trying to create a dynamic Security Group in an Hybrid environment, where all our the users in that group are able to send on behalf of a specific 'Shared mailbox'. We are doing this to allow ...
user23840748's user avatar
1 vote
1 answer
62 views

How to login to microsoft account for web request

I am attempting to get data from https://[org uri].crm.dynamics.com/api/data/v9.1/aadusers. Docs here: https://learn.microsoft.com/sr-cyrl-rs/power-apps/developer/data-platform/aaduser-entity If I am ...
Fred Myspamm's user avatar
1 vote
1 answer
28 views

How does Authorization work for providing programmatic access to a restful API using Azure AD?

I'm having trouble understanding how to provide Authorization Access to my internal clients who are programmatically calling my REST API. The current implementation is pretty much just Basic ...
Emnii's user avatar
  • 11
3 votes
1 answer
203 views

Generating token for Fabric Rest api using client secret

I am working as a POC where I have to connect to Fabric Rest API from c# and I want to create Items. I am able to create items as per the instructions provided on https://learn.microsoft.com/en-us/...
Dharmendra Kumar Singh's user avatar
0 votes
0 answers
40 views

Unable to use MSAL Desktop Apps that use localhost from Azure Storage Explorer and SQL Server Mgmt Studio

When trying to connect from Azure Storage Explorer (v1.33.0) or SQL Server Management Studio (v20.0), I am unable use Azure authentication. I get redirected to Edge to select my Azure account at https:...
Josh Wright's user avatar
0 votes
1 answer
61 views

Get display name for App Ids in Azure conditional access policies

Getting all the CA policies using, $uri = "https://graph.microsoft.com/beta/identity/conditionalAccess/policies" $response = Invoke-MgGraphRequest -Uri $uri -Method GET -Headers $...
Sean21735's user avatar
0 votes
1 answer
24 views

Azure AD OIDC authentication for S3 upload

My application requires external users who do not have access to aws to upload to a private S3 bucket.My requirement is to provide the users some kind of interface from where they can upload to a ...
Goural's user avatar
  • 61
0 votes
1 answer
54 views

try to get authorization_code with person account but get AADSTS9002313 error

I've created an authentication app in Azure to allow access for all users. However, I can only access it using accounts within my organization; accounts outside of the organization(xbox live account ...
user23810836's user avatar
0 votes
1 answer
35 views

.NET Core Web App with Azure AD shows 404

I am following this microsoft tutorial to integrate web app with azure ad for sign in/sign out. https://learn.microsoft.com/en-us/entra/identity-platform/tutorial-web-app-dotnet-call-api?tabs=visual-...
user12589647's user avatar
0 votes
2 answers
70 views

OPEN ID connect request to refresh access token

I'm implementing Azure Ad with Open ID connect for my web app. Intermittently, I get an expired token after logging in which causes the life time validation to fail. I think what I need is to request ...
Devlife's user avatar
  • 13
0 votes
0 answers
87 views

Customizing Error Messages for Azure AD SSO Authentication in React.js with @azure/msal-react

I'm implementing Single Sign-On (SSO) authentication with Azure AD in my React.js application using @azure/msal-react. Currently, when a user who is not present in the Azure AD group tries to ...
Rohan's user avatar
  • 11
0 votes
1 answer
92 views

Azure App Registration redirect URI modifications vs security implications

Microsoft’s security operations guide for applications recommends to alert on changes to redirect URIs within Entra App Registrations. A redirect URI or reply URL is the location where the ...
newby88's user avatar
  • 37
0 votes
0 answers
35 views

How to change Azure AD User invite email template and Accept invite link, Currently it's allowing text only, can we make like HTML

I am trying to customise the Azure AD user invite, Is it possible to make it with HTML or hyperlinks at least for long links. I want to edit the Accept Invitation link, currently it's redirecting to ...
Mohit Agarwal's user avatar
0 votes
1 answer
46 views

Is it possible to get a refresh token for Azure Resource Manager API with the client credentials flow?

I have a long running ADF pipeline that uses a token for management.azure.com to query data from the ADF API. Is it possible to get a refresh token which should have a much longer life than the +-1 ...
Daniel Fynes-Clinton's user avatar
0 votes
1 answer
263 views

InteractiveBrowserCredential authentication failed: AADSTS70011: The provided value for the input parameter 'scope' is not valid

I am trying to increase access token lifetime by following MsDocs. For that I have installed powershell in ubuntu. I have installed Microsoft Graph PowerShell SDK. And following commands. But on ...
Nikhil Mandaliya's user avatar
0 votes
1 answer
23 views

Entra Proxy Service - Switching From IWA to Azure Authentication

Formerly, our Web app used Integrated Windows Authentication (IWA). It worked fine when accessed internally within our corporate network or externally via the Azure Entra Proxy Service. Recently, we ...
Taraz's user avatar
  • 1,312
0 votes
1 answer
36 views

Azure Devops: Deleted users are being suggested when assigning tasks in boards

We deleted about 15 users in an organizations in Azure Devops but their names are still being show in the "assign to" dropdown in azure boards. This is causing confussion and errors because ...
Luis Suarez's user avatar
0 votes
1 answer
21 views

How can I authenticate with Azure using a mobile app without relying on interactive sign-in?

How do I authenticate with Azure, using a mobile app (without relying on interactive sign-in)? Expectations: As I understand, the following values are required for authenticating with Azure resources ...
Scott Nimrod's user avatar
  • 11.4k
0 votes
1 answer
37 views

Blazor 8 Web App goes in infinite loop after Azure AD redirection and cannot sign-in

I am using Blazor 8 WebApp with Azure AD OIDC authentication. Everything works locally but on the server, after the authentication, I can see the redirection happening infinitely until the cookie size ...
Tenacious's user avatar
0 votes
1 answer
80 views

How to create an alert for azure storage account if there is data action permissions assigned to a custom role or a built in role

How to create an alert using Kusto query when an Azure RBAC role (custom and built-in role) is assigned with a data action permission for azure storage account. AzureActivity | where OperationName == &...
Sahith Thatipalli's user avatar
0 votes
1 answer
87 views

Connect SQL server through azure active directory integrated authentication from local Java code

My SQL database is in Azure. it has only azure active directory-integrated authentication. I have Java code in my local machine. I want extract data from SQL db through the Java code. How will I ...
satheetha saleem's user avatar
0 votes
2 answers
105 views

Azure AD Auth, Angular & .NET API with Graph: MSAL.UiRequiredException Fix?

I'm faced with the following situation: I have two app registrations in Azure AD - an Angular 17 web app and a REST API with .NET 6. I've set up authentication/authorization through Azure AD. The ...
Enis's user avatar
  • 95
0 votes
2 answers
107 views

Azure Identity ClientSecretCredential is throwing Method not found error dotnet SDK version 1.10.4

I am using Azure Identity client SDK dotnet 1.10.4 and clientsecretcredential class to generate a token to read from my blob. I followed the list blob in container sample in this link https://learn....
Vijay aravind's user avatar
0 votes
1 answer
54 views

getaccesstoken auth scheme name provided but says it isn't

in a Blazor component I would like to call my API which is hosted in the same application for now. This used to work until I added authentication and authorization. Calling the API from my browser ...
xtreampb's user avatar
  • 542
0 votes
0 answers
34 views

My web application won't return JSON from the server, but the url in a browser does

I've been working on upgrading a WebForms application to use Azure AD. I've registered the app, and provided the ClientID and TenantID to the application. I've done this upgrade to several apps ...
Brian Link's user avatar
0 votes
1 answer
28 views

Invoke Business Central API through AzureAD/EntraID at Application Level (Not Delegated Permission)

I am researching how the Business Central API Permission at application level works in AzureAD/EntraID. I want my application to access high level and sensitive data in Business Central without a ...
user23326452's user avatar
1 vote
1 answer
66 views

Extract logged in user's email from B2C tenant

I am building a python flask web app hosted in Azure that stores a pic in a blob file and at the same time stores info about that picture in an Azure database for PostgreSQL flexible server. The user ...
Monsieur Mark's user avatar
1 vote
1 answer
64 views

How to fetch onPermisesSamAccountName along with default attributes of an user in azure ad sdk java

My azure ad sdk code to fetch all the users from a tenant is as follows List<User> users = new ArrayList<>(); try { UserCollectionRequestBuilder ...
Avinash Reddy's user avatar
0 votes
1 answer
51 views

Microsoft Power BI REST API PowerBINotAuthorizedException

I'm trying to access datasets in PBI, but I can't get the correct permissions I created an application in Microsoft Entra ID To get a token I make a request: POST /{{tenantId}}/oauth2/v2.0/token HTTP/...
Andrey Nazarenko's user avatar
0 votes
1 answer
65 views

Using System Managed Identity from Web App to connect to two different DB? Login failed for user '<token-identified principal>'

I have a .Net App hosted in Azure with System Managed Identity enabled (samplewebapp) and also I have two different DB which the application needs to connect. We have enabled Managed Identity in both ...
Kumar's user avatar
  • 167
0 votes
0 answers
52 views

Connect Az managed Grafana instance to Azure Data Explorer cluster

I have an Azure Data Explorer cluster that's stood up in tenant A. I am trying to connect to it from my Grafana UI(adding a new data source), which is in tenant B. In the Azure Data Explorer cluster ...
Sai's user avatar
  • 702
0 votes
1 answer
73 views

Handling refresh tokens in Azure (Microsoft graph) delegation flow

I am working on a project where I need to create events in user's Outlook calendars. The requirement is that job inspection dates should be added to the calendar of relevant users. Additionally, users ...
Nikhil Mandaliya's user avatar
0 votes
0 answers
33 views

Azure OBO flow produces Web API Client ID while BearerStrategy Expects Azure Web App URI as audience, why?

I'm attempting to build an Azure Web App API where the user authenticates with a seperate confidential client, and then requests to the server are sent on behalf of the user. However, when I recieve ...
Harper Chisari's user avatar
0 votes
1 answer
43 views

Why can't I switch directly to B2C tenant directory from the top right of the Azure portal?

I am sure there's a super simple answer to this: I created a mobile app a couple of years back and had to create a tenant directory to sit on top of my main directory. As far as I can remember the B2C ...
Monsieur Mark's user avatar
-1 votes
1 answer
81 views

how to achieve msal azure ad b2c in react native

const config = { issuer: 'https://zoomonlineb2c.b2clogin.com/zoomonlineb2c.onmicrosoft.com/B2C_1_MobileSignup_in/v2.0', clientId: '83c5579e-d55b-4647-8c93-b66ee2961f49', redirectUrl: ...
Nalin Sakthivel's user avatar
0 votes
1 answer
84 views

Error getting Microsoft Entra Id (AAD) Token using ADF - 404 : NotFound

I'm trying to get an AAD token so that I can use in another Web activity to refresh PBI datasets. However, I'm getting this error when trying to get an AAD Token:. Invoking endpoint failed with ...
Geezer's user avatar
  • 591