How to integrate SSO with our own Javascript application using Node.js REST API

Question

How to integrate SSO with our own Javascript application using Node.js REST API

Saranraj Rasu 0

I am trying to achieve SSO using Azure Active Directory with help of Node.js REST API. i am expecting the scenario is same what google Auth is doing, Same like need to implement with REST API.

Expected Working Scenario:

Same SSO login need to implement with our REST API application. Here i am not able to find Which Graph API endpoint need to use

JamesTran-MSFT 36,896 Reputation points Microsoft Employee Moderator

2023-06-05T21:52:30.13+00:00
@Saranraj Rasu

Thank you for your post and I apologize for the delayed response!

I understand that you're trying to implement Azure AD SSO with the Node.js REST API and to hopefully help point you in the right direction, I found some documentation that I'll share below. Additionally, when it comes to the Google Auth method, can you share the documentation that you're referencing so I can gain a better understanding of your expected solution?

Links:

Configure authentication in a sample Node.js web API by using Azure Active Directory B2C

This article references a web app, calling a web API, where users can authenticate to acquire an access token, which is then used to call a protected web API.

Enable authentication in your own Node.js web API by using Azure Active Directory B2C

This doc adds onto the above where your web API needs to be protected by Azure Active Directory B2C (Azure AD B2C).

Tutorial: Sign in users and acquire a token for Microsoft Graph in a Node.js & Express web app

When it comes to which Graph API endpoint to use, you can reference this tutorial to sign-in users and acquires access tokens for calling Microsoft Graph.

I've also reached out to my team to regarding your issue and will update as soon as possible.

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
Saranraj Rasu 0 Reputation points

2023-06-06T04:23:46.4066667+00:00

Hi JamesTran-MSFT,

Thanks for reply, Let me explain the exact scenario We have chatbot application in that chatbot i have implement SSO login with our own REST API by node.js framework.

I am send Graph API using signin audit log. While checking with others perspective they said it's not correct approach to find signedIn user or not. When it's signedIn user mean i will return success response with JWT token. Incase that user is not singedIn mean i have redirect login page then user need to login with userame and password.

Here i am not find right Graph API to find signedIn or not signedIn user. Already i have raised query regarding this in same forum. And we trying with B2B approach. The question is shows below

https://learn.microsoft.com/en-us/answers/questions/1294535/resource-not-found-for-the-segment-issignedin
JamesTran-MSFT 36,896 Reputation points Microsoft Employee Moderator

2023-06-06T19:23:26.7066667+00:00
@Saranraj Rasu

Thank you for the quick and detailed follow up on this!

I'm not too familiar with the Chatbot side of things, but I've added the Azure Bot Service tag to your thread so their experts can look into your issue as well. When it comes to using the Graph API to see whether a user is signed in or not, as mentioned by Carl Zhao, you'll have to use the List signIns REST API to retrieve the Azure AD user sign-ins for your tenant.

Findings:

When looking more into your issue, I found the Add single sign-on to a bot documentation and it looks like you should be Creating an OAuth connection setting for your Bot, assuming you've already Created the Azure AD identity for your Bot. Once you've created the OAuth connection, and the user has signed into the Bot, it should send back an OAuth Card which contains a TokenExchangeResource property which is used for SSO. For more info.

Additional Links:

About Bot Framework single sign-on

Add authentication to a bot

Add single sign-on to a bot

Microsoft Graph support

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

1 answer

Your answer

JamesTran-MSFT 36,896 Reputation points Microsoft Employee Moderator

2023-06-05T21:52:30.13+00:00

@Saranraj Rasu

Thank you for your post and I apologize for the delayed response!

I understand that you're trying to implement Azure AD SSO with the Node.js REST API and to hopefully help point you in the right direction, I found some documentation that I'll share below. Additionally, when it comes to the Google Auth method, can you share the documentation that you're referencing so I can gain a better understanding of your expected solution?

Links:

Configure authentication in a sample Node.js web API by using Azure Active Directory B2C

This article references a web app, calling a web API, where users can authenticate to acquire an access token, which is then used to call a protected web API.

Enable authentication in your own Node.js web API by using Azure Active Directory B2C

This doc adds onto the above where your web API needs to be protected by Azure Active Directory B2C (Azure AD B2C).

Tutorial: Sign in users and acquire a token for Microsoft Graph in a Node.js & Express web app

When it comes to which Graph API endpoint to use, you can reference this tutorial to sign-in users and acquires access tokens for calling Microsoft Graph.

I've also reached out to my team to regarding your issue and will update as soon as possible.

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
Saranraj Rasu 0 Reputation points

2023-06-06T04:23:46.4066667+00:00

Hi JamesTran-MSFT,

Thanks for reply, Let me explain the exact scenario We have chatbot application in that chatbot i have implement SSO login with our own REST API by node.js framework.

I am send Graph API using signin audit log. While checking with others perspective they said it's not correct approach to find signedIn user or not. When it's signedIn user mean i will return success response with JWT token. Incase that user is not singedIn mean i have redirect login page then user need to login with userame and password.

Here i am not find right Graph API to find signedIn or not signedIn user. Already i have raised query regarding this in same forum. And we trying with B2B approach. The question is shows below

https://learn.microsoft.com/en-us/answers/questions/1294535/resource-not-found-for-the-segment-issignedin
JamesTran-MSFT 36,896 Reputation points Microsoft Employee Moderator

2023-06-06T19:23:26.7066667+00:00

@Saranraj Rasu

Thank you for the quick and detailed follow up on this!

I'm not too familiar with the Chatbot side of things, but I've added the Azure Bot Service tag to your thread so their experts can look into your issue as well. When it comes to using the Graph API to see whether a user is signed in or not, as mentioned by Carl Zhao, you'll have to use the List signIns REST API to retrieve the Azure AD user sign-ins for your tenant.

Findings:

When looking more into your issue, I found the Add single sign-on to a bot documentation and it looks like you should be Creating an OAuth connection setting for your Bot, assuming you've already Created the Azure AD identity for your Bot. Once you've created the OAuth connection, and the user has signed into the Bot, it should send back an OAuth Card which contains a TokenExchangeResource property which is used for SSO. For more info.

Additional Links:

About Bot Framework single sign-on

Add authentication to a bot

Add single sign-on to a bot

Microsoft Graph support

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

Answer 1

Bruce (SqlWork.com) 77,321 Volunteer Moderator

I assume your rest api uses jwt bearer tokens. You should be able to configure you current google oauth code, but here is a sample using msal (microsoft oauth sdk) for azure ad:

https://learn.microsoft.com/en-us/azure/active-directory-b2c/enable-authentication-in-node-web-app-with-api

note: you need to create an application in azure ad for your node app. if you want scopes, you define them in api portion of the defining the application

JamesTran-MSFT 36,896 Reputation points Microsoft Employee Moderator

2023-06-07T19:26:32.8866667+00:00

@Saranraj Rasu

I wanted to check in and see if you had any other questions? Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Share via

How to integrate SSO with our own Javascript application using Node.js REST API

1 answer

Your answer