Mixing
Azure AD Authentication for Intranet Web Application
We are developing Intranet web application using NET framework is 4.6.1 (C#). Both UI (MVC) and backend (Web API) would be deployed as separate web apps in IIS. The requirement is to authenticate user against Azure AD hosted on Cloud. We are able to achieve the same by referring mostly to this article. As soon as user access the Web App, user is redirected to Azure login page and redirected to web app home page after successful authentication.
we are getting multiple roles (admin/user/executive etc.) as claims in MVC but the same roles/claims are not available in Web API. How to get all the claims roles (admin/user/executive etc.) in Web API?
Below is sample code in MVC but the same is not working in Web API.
(ClaimsIdentity)User.Identity.Claims
.net asp.net-mvc
azure claims-based-identity edited Jan 1 at 11:07
James Z
11.2k71935
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
add a comment |
We are developing Intranet web application using NET framework is 4.6.1 (C#). Both UI (MVC) and backend (Web API) would be deployed as separate web apps in IIS. The requirement is to authenticate user against Azure AD hosted on Cloud. We are able to achieve the same by referring mostly to this article. As soon as user access the Web App, user is redirected to Azure login page and redirected to web app home page after successful authentication.
we are getting multiple roles (admin/user/executive etc.) as claims in MVC but the same roles/claims are not available in Web API. How to get all the claims roles (admin/user/executive etc.) in Web API?
Below is sample code in MVC but the same is not working in Web API.
(ClaimsIdentity)User.Identity.Claims
.net asp.net-mvc
azure claims-based-identity edited Jan 1 at 11:07
James Z
11.2k71935
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
add a comment |
We are developing Intranet web application using NET framework is 4.6.1 (C#). Both UI (MVC) and backend (Web API) would be deployed as separate web apps in IIS. The requirement is to authenticate user against Azure AD hosted on Cloud. We are able to achieve the same by referring mostly to this article. As soon as user access the Web App, user is redirected to Azure login page and redirected to web app home page after successful authentication.
we are getting multiple roles (admin/user/executive etc.) as claims in MVC but the same roles/claims are not available in Web API. How to get all the claims roles (admin/user/executive etc.) in Web API?
Below is sample code in MVC but the same is not working in Web API.
(ClaimsIdentity)User.Identity.Claims
.net asp.net-mvc
azure claims-based-identity edited Jan 1 at 11:07
James Z
11.2k71935
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
We are developing Intranet web application using NET framework is 4.6.1 (C#). Both UI (MVC) and backend (Web API) would be deployed as separate web apps in IIS. The requirement is to authenticate user against Azure AD hosted on Cloud. We are able to achieve the same by referring mostly to this article. As soon as user access the Web App, user is redirected to Azure login page and redirected to web app home page after successful authentication.
we are getting multiple roles (admin/user/executive etc.) as claims in MVC but the same roles/claims are not available in Web API. How to get all the claims roles (admin/user/executive etc.) in Web API?
Below is sample code in MVC but the same is not working in Web API.
(ClaimsIdentity)User.Identity.Claims
.net asp.net-mvc
azure claims-based-identity .net asp.net-mvc
azure claims-based-identity edited Jan 1 at 11:07
James Z
11.2k71935
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
edited Jan 1 at 11:07
James Z
11.2k71935
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
edited Jan 1 at 11:07
James Z
11.2k71935
edited Jan 1 at 11:07
James Z
11.2k71935
edited Jan 1 at 11:07
James Z
11.2k71935
11.2k71935
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
asked Jan 1 at 7:58
Parveen KumarParveen Kumar
1443312
1443312
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
I think the easiest thing to do will be pass the content of the Authorization header (the token) from the request coming into the MVC app as the content for the Authorization header for the request going to the Web API app.
Hope it helps!
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53993914%2fazure-ad-authentication-for-intranet-web-application%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I think the easiest thing to do will be pass the content of the Authorization header (the token) from the request coming into the MVC app as the content for the Authorization header for the request going to the Web API app.
Hope it helps!
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
add a comment |
I think the easiest thing to do will be pass the content of the Authorization header (the token) from the request coming into the MVC app as the content for the Authorization header for the request going to the Web API app.
Hope it helps!
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
add a comment |
I think the easiest thing to do will be pass the content of the Authorization header (the token) from the request coming into the MVC app as the content for the Authorization header for the request going to the Web API app.
Hope it helps!
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
I think the easiest thing to do will be pass the content of the Authorization header (the token) from the request coming into the MVC app as the content for the Authorization header for the request going to the Web API app.
Hope it helps!
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
answered Jan 1 at 9:43
Itay PodhajcerItay Podhajcer
2,0091413
2,0091413
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
add a comment |
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
Can you please share more details or sample code if possible.
– Parveen Kumar
Jan 2 at 4:39
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53993914%2fazure-ad-authentication-for-intranet-web-application%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
