Connect to Graph API with App Reg inside Azure Function

Question

Connect to Graph API with App Reg inside Azure Function

Bickel, Maxim 1

Hi,

I am trying to connect to GraphAPI in order to get some users and put them into different Groups.
Is there any possibility to connect to the Graph API within an Azure Function using an App Reg (Cert oder Secret).

If it is possbile: how? And is it possible to run the Azure Function within Tenant A but connect to Tenant B (using Graph API).

Thanks for your help.

1 answer

Your answer

Answer 1

Alistair Ross 7,466 Microsoft Employee

Hi @Bickel, Maxim

Yes, it is possible. What you have to understand is that the function is just a code running on a computer, regardless of where it is. Therefore, all you need to do is provide the function the details of the App Registration and ensure that the function does not have any network limitations for connecting to the graph Api. (or any Api that you are wanting to connect to for that matter)

Here is an example function https://learn.microsoft.com/en-us/samples/microsoftgraph/msgraph-sample-azurefunction-csharp/microsoft-graph-sample-azure-function.
This sample demonstrates how to use the Microsoft Graph .NET SDK to access data in Office 365 from Azure Functions.

Something to keep in mind is that the client secret isn't stored in the code, but referenced from a key vault within the functions application settings. Also make sure that the App Registration is created in Tenant B.

I hope this helps provide you with the information you need. If it does, please make sure to mark the question as answered so it helps other people in future.

Kind regards

Alistair

Bickel, Maxim 1 Reputation point

2022-12-01T11:54:58.22+00:00

Hi Alistair,

I am really thankfull for you help. But I still couldnt figure it out. Maybe I should deliver more details:

I have a Azure Function running the following Code:

As you can see I am trying to connect only with the App-Reg-Id and the Thumbnail of the Cert that is registered within the App Reg. As for connecting to Tenant B the goal is to disconnect from Graph and reconnect with another App-Reg-Id and Cert that are registerd in Tenant B.

Sorry if you need to answer it twice.

Thanks again for your help.

Kind Regards
Maxim
Alistair Ross 7,466 Reputation points Microsoft Employee

2022-12-01T14:35:40.107+00:00

Hi @Bickel, Maxim

My understanding and the way I would approach it is that I would suggest that you pass the details of the different App Registration details into the function by populating them in the function application settings. Make sure you store the secrets in Azure Key Vault and reference them in the app settings so they aren't visible in the function app settings in plain text.

This way you will have two distinct sets of environment variables that you can access within your functions PowerShell script to use to authenticate between the different tenants. https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-powershell?tabs=portal#environment-variables

Alistair
Bickel, Maxim 1 Reputation point

2022-12-06T07:14:56.203+00:00

Hi Alistair,

yes, I completely agree with you but my problem is that the mentioned method to authenticate with my tenant isnt working.
It seems like that my azure function isnt connected to the app reg or at least cant use the cert of the app reg.

Thanks for your help.

Maxim

Share via

Connect to Graph API with App Reg inside Azure Function

1 answer

Your answer