Microsoft AD Authentication IN JMeter

Sumit Satpathy 25

Hi Team

I am doing performance testing with JMeter for our application which requires AD Microsoft Authentication.

Currently, we are facing a problem with Azure authentication in JMeter which we are seeking support. As Azure authentication generate token and session dynamically for login and when every time we login into the application, azure authentication is required in JMeter.

I passed the dynamic variables like csrf token, Client ID, State ID, and Session Token, but still getting bad requests in response for the "oauth2/v2.0/authorize" API, where in response flow-token and APICANARY will be generated.

Can someone help me with the Microsoft authentication .jmx script or any idea to resolve it.

Marilee Turscak-MSFT 36,866 Reputation points Microsoft Employee

2023-08-02T22:38:51.78+00:00

There is no official guide for this that I'm aware of, but there are some threads that offer guidance around using OAuth and extracting the tokens using the Chrome developer tools.

https://stackoverflow.com/questions/46342984/azure-ad-authentication-with-jmeter

https://stackoverflow.com/questions/41818784/how-to-do-a-oauth-2-0-authentication-in-jmeter/41820447#41820447

https://stackoverflow.com/questions/56276193/jmeter-azure-ad-bearer-token-configuration-function

https://learn.microsoft.com/en-us/answers/questions/311536/azure-authentication-in-jmeter
JamesTran-MSFT 36,636 Reputation points Microsoft Employee

2023-08-07T21:10:54.9166667+00:00

@Sumit Satpathy

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
Sumit Satpathy 25 Reputation points

2023-08-17T13:53:56.6133333+00:00
@JamesTran-MSFT We are still stuck on the same issue not able to resolve for the below 2 APIs, we handle all the dynamic variables but still getting 400 Bad Requests on response from JMeter

login.microsoftonline.com/e0d21cb3-860e-4c0f-9c20-ef1b7466a95c/oauth2/v2.0/authorize?response_type=code&redirect_uri=https%253A%252F%252Fno-iris-dev-sc-app-01.azurewebsites.net%252Fapi%252Fauth%252Fcallback%252Fazure-ad&state=FVqhAXloz67hbn2Equ8kpgvh9pfLE9NeO6qsTwEheik&client_id=fbc99316-3181-490a-80bb-edbaaef279a3&scope=openid%2520profile%2520email

login.microsoftonline.com/e0d21cb3-860e-4c0f-9c20-ef1b7466a95c/oauth2/v2.0/authorize?sso_reload=true&scope=openid%2520profile%2520email&response_type=code&redirect_uri=https%253A%252F%252Fno-iris-dev-sc-app-01.azurewebsites.net%252Fapi%252Fauth%252Fcallback%252Fazure-ad&state=FVqhAXloz67hbn2Equ8kpgvh9pfLE9NeO6qsTwEheik&client_id=fbc99316-3181-490a-80bb-edbaaef279a3

ABove 2 API's will generate the flow token which will be pass by next subsequent API's , which we are not able to do so
Ashish Namdeo 0 Reputation points

2024-06-21T12:38:11.84+00:00
Hi Sumit, were you able to resolve this issue. Please let me know. I am not able to get following parameters in previous response to send it in below request

state

nonce

codeChallenge

ClientRequestID

https//login.microsoftonline.com/<TenantID>/oauth2/v2.0/authorize?client_id=<ClientID>&scope=openid+profile+offline_access&redirect_uri=<URL>&client-request-id=<ClientRequestID>&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.14.0&client_info=1&code_challenge=<codeChallenge>&code_challenge_method=S256&nonce=<nonce>&state=<state>

1 answer

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Microsoft AD Authentication IN JMeter

1 answer

Your answer