Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 11 additions & 12 deletions docs/Authorization/AzureAD.md
Original file line number Diff line number Diff line change
@@ -1,26 +1,25 @@
### Azure Active Directory

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. It includes support for various identity protocols, including OpenID Connect (OIDC), which is a standard protocol built on top of OAuth 2.0 for authentication and identity verification.
Microsoft Entra ID (old Azure AD) is Microsoft's cloud-based identity and access management service. It supports various identity protocols, including OpenID Connect (OIDC), a standard protocol built on top of OAuth 2.0 for authentication and identity verification.

For more information go to: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
For more information, go to: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis

#### Register a client app in Azure

- Navigate to Azure Active Directory in the Azure portal. Select App registrations in the sidebar. Select the New registration button.
- Navigate to Azure Active Directory in the Azure portal. In the sidebar, select App registrations. Select the New registration button.
- Provide a Name for the app (for example, Blog Client AAD).
- Choose a Supported account types. You may select Accounts in this organizational directory only (single tenant).
- Set the Redirect URI dropdown list to Web and provide the following redirect URI: `https://localhost:PORT/callback` (please change port number). If you know the production redirect URI for the Azure default host (for example, azurewebsites.net) or the custom domain host (for example, contoso.com), you can also add the production redirect URI at the same time that you're providing the localhost redirect URI. Be sure to include the port number for non-:443 ports in any production redirect URIs that you add.
- Choose a Supported account types. You may select `Accounts in this organizational directory only (single tenant)`.
- Set the Redirect URI dropdown list to Web and provide the following redirect URI: `https://localhost:PORT/callback` (please change the port number). If you know the production redirect URI for the Azure default host (for example, azurewebsites.net) or the custom domain host (for example, contoso.com), you can also add the production redirect URI at the same time that you're providing the localhost redirect URI. Be sure to include the port number for non-:443 ports in any production redirect URIs that you add.
- Select Register.
- After Registration, go to Authentication and enable Access tokens and ID tokens inside Implicit grant and hybrid flows
- note down the Application (client) ID, tenant ID
- Go to Certificates & secrets and generate a new secret and note it down for future use

Fore more about application registration please visit : https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app
- Write down the Application (client) ID and tenant ID.
- Go to Certificates & secrets, generate a new secret, and write it down for future use.
For more about application registration, please visit: https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app

### Configuration

In `appsettings.json` change the `AuthenticationProvider` to `Auth0`
and add following configurations
In `appsettings.json`, change the `AuthenticationProvider` to `AzureAD`
and add the following configurations

```json
{
Expand All @@ -43,5 +42,5 @@ and add following configurations
| `name of the auth provider` | | Configuration for setting up the auth provider, it should be same as the value of AuthProvider property |
| Domain | string | `login.microsoftonline.com/<TENANT_ID>/v2.0` |
| ClientId | string | Application (client) ID |
| ClientSecret | string | Client Secret |
| ClientSecret | string | Client Secret (Value) |
| LogoutUri | string | `https://login.microsoftonline.com/<TENANT_ID>/oauth2/v2.0/logout?post_logout_redirect_uri=https://localhost:44389` |