Скачать или смотреть Asp.net Core Azure AD Authentication With Azure App Service

Asp.net Core Azure AD Authentication is covered in this video along with below tops.
azure app service managed identity key vault.
Azure ad authentication asp.net core mvc - how to add it?
Azure AD authentication using Certificates?
Azure AD authentication using Azure Keyvault Certificates- how to do it?
Fix for The group or User does not have get permission on Azure Keyvault.
Fix for AADSTS500113 No Reply address is registered for the application
Fix for AADSTS9002332 - Application is configured for use by Azure Active Directory users only. Please do not use the consumer endpoint.
------------------------------------------------------------------------------------------------
Azure AD Authentication can be added to Asp.net Core MVC Project. We have to add Azure.Identity, Azure.Identity.Web and Azure.Identity.Web.UI packages to Asp.net Core MVC project. After that in startup.cs class we have to add Azure AD Authentication details. We have to call AddMicrosoftWebAppIdentityAuthentication method. This method will take Azure AD Authentication details from appsettings.json file.
-----------------------------------------------------------------------------------------------
In appsettings.json file, we have to configure Azure TenantId, ClientId and Instance details. As we are going to use Azure AD Authentication using certificates, we have to create a certificate in Azure Keyvault and after that download the certificate from Azure Key Vault.
---------------------------------------------------------------------------------------------
we have to create an App Registration in Azure AD - Azure Active Directory and upload the certificate in Azure AD App registration. As we are going to call Azure Graph API the Azure AD app registration should have permissions. By default Azure AD app registration will have delegated permissions on Azure Active Directory.
---------------------------------------------------------------------------------------------
After doing all the configurations for Asp.net core web app authentication Azure AD, if you run the solution the application will fail with AADSTS9002332 error. This is because, If we run Asp.net core Web app using Azure AD and certificates, it uses the logged in user permissions of Visual studio and hence the logged in user must have permissions on Azure Key Vault. We need to add permissions on Azure Key vault by going to Access policies of Azure Key Vault and add get permission on Azure Key vault certificates for the logged in user.
------------------------------------------------------------------------------------------
If we have to deploy this application to Azure App Service, we have to enable azure app service managed identity key vault. We have to create the app service and in Identity section, we have to create System Assigned Identity in Azure App Service and then we have to provide permissions to the managed identity/System Assigned Identity of the app service on Azure Key Vault. Otherwise it will give AADSTS500113 No Reply address is registered for the application issue. Also, we have to configure the call back url of Azure App service in Azure App registration to enable Azure AD Authentication asp.net core. When you access the url, you will be able to access the App which uses Asp.net core Azure Ad Authentication .
------------------------------------------------------------------------------------------
Chapters
00:00 Introduction
00:35 How to certificate Azure Key Vault
04:45 Configuring Azure AD details in Asp.net Core appsettings
08:26 Modifying Startup.cs for Azure AD Authentication Asp.net core
13:36 AADSTS500113 No Reply address is registered for the application
14:40 AADSTS9002332 - Issue fix
16:57 AADSTS9002332 - Application is configured for use by Azure Active Directory users only
19:00 Creating App Service in Azure
20:45 Managed Identity to Azure App Service



#AzureAD# #AzureADAuthentication# #AzureTutorials#