Questions tagged [adal]

The Azure Active Directory Authentication Libraries (ADAL) gives you the ability to add support for Microsoft's cloud identity APIs to your application, including support for Office365 and Work Accounts. Supports native clients such as Windows, Windows Phone, iOS, OSX, Android, and Linux and server clients such as Windows Server, Node.js and Java.

Microsoft Azure Identity Libraries powered by Azure Active Directory

The Azure Active Directory Authentication Libraries (ADAL) gives you the ability to add support for Microsoft's cloud identity APIs to your application, including support for Office365 and Work Accounts.

These SDKs support native clients such as Windows, Windows Phone, iOS, OSX, Android, and Linux and server clients such as Windows Server, Node.js and Java.

These SDK gives your application the full functionality of Microsoft's identity platform, including industry standard protocol support for OAuth2, Web API integration with user level consent, and two factor authentication support. Best of all, it’s FOSS (Free and Open Source Software) so that you can participate in the development process as we build these libraries.

What is a Work Account?

A Work Account is an identity you use to get work done no matter if at your business or on a college campus. Anywhere you need to get access to your work life you'll use a Work Account. The Work Account can be tied to an Active Directory server running in your datacenter or live completely in the cloud like when you use Office365. A Work Account will be how your users know that they are accessing their important documents and data backed my Microsoft security.

We provide a full suite of sample applications and documentation on GitHub to help you get started with learning the Azure Identity system. This includes tutorials for native clients such as Windows, Windows Phone, iOS, OSX, Android, and Linux. We also provide full walkthroughs for authentication flows such as OAuth2, OpenID Connect, Graph API, and other awesome features.

Contributing

All code is licensed under the Apache 2.0 license and we triage actively on GitHub. We enthusiastically welcome contributions and feedback. You can clone the repo and start contributing now.

1611 questions
10
votes
1 answer

How can I configure the expiration time of an Azure AD access token (using ADAL)?

We use Azure AD to authenticate users into our WPF application, using their Office 365 accounts. This is done using the Active Directory Authentication Library (ADAL). Currently, they are prompted to log in every time they open the app. We want to…
S-Vuk
  • 339
  • 1
  • 4
  • 14
10
votes
1 answer

passport-azure-ad: which strategy to use

We have front end developed in AngularJS and backend APIs in NodeJs. We are using Azure AD for authentication. Frontend Angular is using adal-angular javascript library for azure authentication. So when user comes to web site, he gets redirected to…
LP13
  • 30,567
  • 53
  • 217
  • 400
10
votes
1 answer

What is the difference between passport-azure-ad vs passport-azure-ad-oauth2

We have application that is developed using MEAN stack. and we are planning to use Azure AD for authentication. Client Side In angular the client side resources are protected using adal JS library based on article here Server Side Node Web API To…
LP13
  • 30,567
  • 53
  • 217
  • 400
10
votes
3 answers

multiple_matching_tokens_detected with ADAL

I have a service that uses Azure access tokens that we retrieve using ADAL. We have several hundred customers, but for some reason there are two of them that sporadically generate this error when we try to retrieve an AuthenticationResult for them: …
Steve Peschka
  • 1,015
  • 11
  • 25
9
votes
2 answers

How to debug JWT and AuthorizeAttribute

I am following this Microsoft Docs tutorial and everything appears to work upto the point where I call the web api with the access token using Postman. To be specific: I request a token, Azure AD redirects me to supply Username and…
phil
  • 1,938
  • 4
  • 23
  • 33
9
votes
4 answers

passport-azure-ad veriy msal.js token with Bearer Strategy

Im trying to integrate msal.js library(https://github.com/AzureAD/microsoft-authentication-library-for-js) with passport-azure-ad (https://github.com/AzureAD/passport-azure-ad) Bearer Strategy. My configurations are as follows: Msal.js { …
ruciu
  • 672
  • 8
  • 17
9
votes
1 answer

How to specify Resource URI when acquiring access token for Azure AD V2 endpoint?

I have used ADAL.js in a previous project which supported only work accounts and am able to successfully acquire idtokens and then accesstokens to an API (ResourceURI: "https://myresource.com"). Works fine. Now, I am trying to use MSAL.js for…
Sat Thiru
  • 922
  • 2
  • 10
  • 20
9
votes
1 answer

How to use Ionic native - MS Adal in ionic project?

I'm new to Ionic and I want to authenticate the user using Azure. So I'm using MS ADAL Ionic Native in my project. I couldn't find any proper example online. Here is my app.component.ts import { Component } from '@angular/core'; import { Platform }…
Rathnakara S
  • 1,446
  • 11
  • 17
9
votes
1 answer

How to get client_assertion string

I've written EWS application in C++. Currently it supports Basic and NTLM authentication, now trying to support OAuth authentication Since it is C++ application I can't use .NET AcquireToken, so I need to post the below request for OAuth…
Vinod
  • 91
  • 1
  • 1
  • 2
9
votes
2 answers

Create a new user in Azure Active Directory (B2C) with Graph API, using http post request

I have previously been adding users programmatically using Active Directory Authentication Library (ADAL), but now I need to define "signInNames" (= users email), and that doesn't seem to be possible with ADAL (please tell me if im wrong). Now I'm…
mellberg
  • 181
  • 1
  • 1
  • 5
9
votes
3 answers

OAuth 2.0 Authorization Code Grant without secret

So I've been looking at setting up OAuth 2.0 for a Cordova mobile app using Microsofts cordova-plugin-ms-adal plugin (which uses the native libs) against a custom API using Azure AD. This all works well but I'm a bit confused with the use of the…
Ross
  • 1,425
  • 1
  • 19
  • 38
9
votes
1 answer

Microsoft.IdentityModel.Clients.ActiveDirectory.UserCredential does not take 2 parameters?

I'm using ADAL in my code. One thing I want to use is to use different credentials, so I can authorize different users against Azure AD in the console program. Microsoft.IdentityModel.Clients.ActiveDirectory.UserCredential cred = new…
urlreader
  • 6,319
  • 7
  • 57
  • 91
9
votes
2 answers

CORS preflight request responds with 302 redirect in Azure hosted Web API

Scenario: I have two ASP.NET web applications hosted separately on Windows Azure and both associated to the same Azure Active Directory tenant: An MVC app with an AngularJS SPA frontend and the adal.js library for handling Azure AD authentication…
Bryan
  • 2,870
  • 24
  • 39
  • 44
9
votes
4 answers

Why does AcquireToken with ClientCredential fail with invalid_client (ACS50012)?

Why won't my Azure AD application allow an oauth client_credentials grant? I want to use the Azure Graph API, but first I need an oauth token. To get the token, I am trying to use Microsoft.IdentityModel.Clients.ActiveDirectory aka ADAL version…
tjleigh
  • 1,134
  • 1
  • 10
  • 23
8
votes
1 answer

Error : Tenant authorize not found. This may happen if there are no active subscriptions for the tenant

I have written the following code to acquire token for CRM. class Program { private const string username = "richa@azuretraining112.onmicrosoft.com"; private const string password = "Pa$$w0rd"; private const string serviceURL =…
Richa Tibrewal
  • 468
  • 7
  • 26