Azure AD - SSO is failing on behind corporate proxy

praveen singh 1

I'm facing an issue in SSO with Azure Active directory. Since my application is working properly on local. But on server where proxy setting applied for accessing any external application then its not working. Can someone help me how to resolve this problem, I have tried to do some code in Owin for proxy setting but it didn't work for me.

Alfredo Revilla - Senior Freelance SWE, SWA, IAM 26,936 Reputation points

2022-07-26T17:01:13.807+00:00

Hello @praveen singh , please share your proxy service and config. Also, your Owin configuration and detailed information about the hosting platform and the errors being faced.
praveen singh 1 Reputation point

2022-07-26T18:13:12.49+00:00

@Alfredo Revilla - Senior Freelance SWE, SWA, IAM - I am using windows hosting. below is config code.
praveen singh 1 Reputation point

2022-07-26T18:13:27.363+00:00

public void ConfigureAuth(IAppBuilder app)
{
app.SetDefaultSignInAsAuthenticationType(CookieAuthenticationDefaults.AuthenticationType);
app.UseCookieAuthentication(new CookieAuthenticationOptions());
app.UseCookieAuthentication(new CookieAuthenticationOptions
{
CookieManager = new SystemWebCookieManager()
});
var aadProxy = new WebProxy()
{
Address = new Uri("http://...*:8080"),
UseDefaultCredentials = true
};
app.UseOpenIdConnectAuthentication(
new OpenIdConnectAuthenticationOptions
{
BackchannelHttpHandler = new System.Net.Http.HttpClientHandler()
{
UseProxy = true,
Proxy = aadProxy,
UseDefaultCredentials = true,
},
ClientId = ConfigurationManager.AppSettings["ida:ClientId"],
Authority = "https://login.microsoftonline.com/" + ConfigurationManager.AppSettings["ida:Tenant"] + "/v2.0",
PostLogoutRedirectUri = ConfigurationManager.AppSettings["ida:PostLogoutRedirectUri"],
RedirectUri = ConfigurationManager.AppSettings["ida:LoginSuccessRedirectUri"],
Scope = OpenIdConnectScope.OpenIdProfile,
RequireHttpsMetadata = false,
ResponseType = OpenIdConnectResponseType.CodeIdToken,
TokenValidationParameters = new TokenValidationParameters()
{
ValidateIssuer = false,
NameClaimType = "name"
},
Notifications = new OpenIdConnectAuthenticationNotifications
{
AuthenticationFailed = (context) =>
{
if (context.Exception.Message.Contains("IDX21323"))
{
context.HandleResponse();
context.OwinContext.Authentication.Challenge();
}
return Task.FromResult(true);
}},
CookieManager = new SystemWebCookieManager()
});
}
praveen singh 1 Reputation point

2022-07-30T05:48:14.407+00:00

@Alfredo Revilla - Senior Freelance SWE, SWA, IAM - any insight on above asked issue.