Questions tagged [azure-active-directory]

Microsoft Azure Active Directory (Microsoft Azure AD) is a modern developer platform and IAM service that provides identity management and access control capabilities for your cloud applications. It uses industry standard protocols like OAuth2.0, OpenId Connect, and SAML2.0.

Microsoft Azure Active Directory (Microsoft Azure AD) is a modern developer platform and IAM service that provides identity management and access control capabilities for your cloud applications. It uses industry standard protocols like OAuth2.0, OpenId Connect, and SAML2.0.

It provides a one-stop identity service across Microsoft Azure, Microsoft Office 365, Dynamics CRM Online, Microsoft Intune and other 3rd party cloud services.

It can easily be integrated with Cloud-based Azure AD accounts, on-premise AD, and ADFS and can provide SSO functionality.

Resources

17474 questions
221
votes
28 answers

How to get the azure account tenant Id?

My question is: Is it possible to get the azure active directory tenant id without using powershell command? I found this two blogs and with this help, I'm already able to get the tenant ID and subscriptions ID from powershell. Is it the only way…
Annie Vincent
  • 2,475
  • 2
  • 12
  • 6
163
votes
2 answers

What format is the exp (Expiration Time) claim in a JWT

I am using ADAL library to get access token for a resource. Does anyone know what format is the expiration time in ? more specifically "exp" (Expiration time) claim. JwtSecurityToken class simply returns int32 after parsing. So, that is not a good…
Frank Q.
  • 6,001
  • 11
  • 47
  • 62
151
votes
6 answers

Difference between "enterprise application" and "app registration" in Azure

Could someone please tell me what the difference is between "enterprise application" and "app registration" in Azure. Appreciate if you could give me an example & why some application cannot be registered under blade "Enterprise application" and…
POSH Guy
  • 1,798
  • 2
  • 11
  • 15
120
votes
8 answers

What is the difference between an Azure tenant and Azure subscription?

I am struggling to distinguish how an Azure Subscription and an Azure tenant are different? I have tried figuring it out using examples but each time I come to the conclusion that they are the same thing in a way? If a tenant is a dedicated instance…
DMQ95
  • 1,201
  • 3
  • 9
  • 8
106
votes
8 answers

AADSTS70005: response_type 'id_token' is not enabled for the application

AADSTS70005: response_type 'id_token' is not enabled for the application I am getting above error even after setting "oauth2AllowImplicitFlow": true, in manifest.
Jajula Siva
  • 1,079
  • 2
  • 7
  • 7
87
votes
7 answers

Difference between Service Principal and Managed Identities in Azure

I would like to know if it is always recommended to use Managed Identities in Azure , mostly system assigned or a Service Principal? When should Service Principals be used in Azure compared to a managed identity, what is the advantage of one over…
Pallab
  • 1,915
  • 2
  • 19
  • 46
85
votes
9 answers

Azure Blob Storage "Authorization Permission Mismatch" error for get request with AD token

I am building an Angular 6 application that will be able to make CRUD operation on Azure Blob Storage. I'm however using postman to test requests before implementing them inside the app and copy-pasting the token that I get from Angular for that…
SebastianG
  • 8,563
  • 8
  • 47
  • 111
77
votes
8 answers

"Use a tenant-specific endpoint or configure the application to be multi-tenant" when signing into my Azure website

I'm getting this error after I sign into my Azure website: AADSTS50194: Application 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxx' is not configured as a multi-tenant application. Usage of the /common endpoint is not supported for such applications…
DharmaTurtle
  • 6,858
  • 6
  • 38
  • 52
71
votes
2 answers

Azure AD App Application Permissions vs Delegated Permissions

I am creating an Azure AD app and noticed there are two permissions types, Application Permissions and Delegated Permissions. What is the difference between the two and under what scenario should I use them?
Arjuna
  • 813
  • 1
  • 6
  • 5
60
votes
5 answers

TokenValidationParameters no longer working after upgrade to 5.0.0

I have the following code which was working when I was using System.IdentityModel.Tokens.Jwt, Version=4.0.20622.1351 private static void ConfigureAzureAD(IAppBuilder appBuilder) { appBuilder.UseWindowsAzureActiveDirectoryBearerAuthentication( …
MHOOS
  • 5,146
  • 11
  • 39
  • 74
59
votes
21 answers

Correlation failed in net.core / asp.net identity / openid connect

I getting this error when a Azure AD user login (I able to get the user´s claims after), im using a combination of OpenIdConnect, with asp.net Identity core over net.core 2.0 An unhandled exception occurred while processing the request. Exception:…
Augusto Sanchez
  • 999
  • 1
  • 6
  • 14
58
votes
4 answers

AADSTS9002325: Proof Key for Code Exchange is required for cross-origin authorization code redemption

I created a spa application owned by my organization only, but there was a problem when I requested code. How can I resolve it?
user14504804
  • 609
  • 1
  • 5
  • 6
50
votes
12 answers

Graph API - Insufficient privileges to complete the operation

When trying to access the Graph Service Client using I am receiving the error: Code: Authorization_RequestDenied Message: Insufficient privileges to complete the operation. After researching this error the most common solution was to set the…
50
votes
2 answers

Azure AD vs Azure AD B2C vs Azure AD B2B

Before Azure AD B2C and Azure AD B2B come into the picture, usualy I added my applications to Azure AD of our tenancy and office 365 users could access the applications using their account (SSO). I am not a guru so I need to see code and read about…
user217648
  • 3,338
  • 9
  • 37
  • 61
49
votes
6 answers

EF Core Connection to Azure SQL with Managed Identity

I am using EF Core to connect to a Azure SQL Database deployed to Azure App Services. I am using an access token (obtained via the Managed Identities) to connect to Azure SQL database. Here is how I am doing that: Startup.cs: public void…
1
2 3
99 100