Azure Active Directory with Azure App Service ASP.NET

Question

Using the Azure portal -> Azure Active Directory -> App Registrations. I created a new app registration and connected it to my Azure App Service (ASP.NET Web Forms website).

Why does the redirect URI have to always be changed from localhost/ to my azure app service URL when I develop vs when I want the changes to be live?

This makes it so anytime I'm developing the web app is down because it's trying to connect to localhost rather than the live instance of the azure app

Answer 1

Hi Mikaela,

It needs to be changed so that the connection is made between Azure and your application for authentication purposes. Registering the application means that you and your developers can use Azure AD to authenticate users and request access to user resources.

If you want to test using both, you just need to add more than one reply URL in the registration and just toggle your app configuration.

https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/developer-guidance-for-integrating-applications

Answer 2

Hi @Mikaela Caron ,

@MarileeTurscak is referring to the Web Redirect URI that you mentioned. You'll have to toggle that between localhost and your deployed app or you can create a separate app registration for your localhost environment. That doesn't mean adding an app registration here will be automatically linked your app. Think of the App Registration as a registry of entries where the entry says for applications that have this GUID, the Application (client) id, send the token of an authenticated user back to this URI.

Now, from the app service standpoint, you'll use the Authentication/Authorization blade to say my app will use this app registration entry because this app has the URI that will receive the token. You can also create app registration from the app service from this blade and see it appear in the App Registration blade of the Azure Active Directory because your saying I want my app to receive the token from my tenant when a user successfully signs in.

Hope that clears up the confusion of why you can't configure app service registration from AAD in the portal. If you have any further questions, let us know.