Does azure ad authentication work with windows installer

So25 0

I have a web application, where I authenticate user using Azure AD and retrieve the app role in my code.

The application is also configured to work offline by installing it on the computer. My application works fine when used offline. Expect for retrieving the app role part.

So I would like to know if azure ad authentication work with windows installer. Because when the application is used offline, it does not return app role part of my code.

builder.Services.AddMsalAuthentication

JamesTran-MSFT 36,596 Reputation points Microsoft Employee

2024-02-01T21:39:43.91+00:00

@So25
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
James Hamil 24,136 Reputation points Microsoft Employee

2024-03-05T23:03:27.43+00:00

Hi @So25 , did you need any more help with this question? If not could you please mark "Accept Answer" on the appropriate answer so other users can reference it?

Thank you,

James

1 answer

Bruce (SqlWork.com) 63,746 Reputation points

2024-01-22T20:05:28.0766667+00:00

your use case is not clear. azure ad requires a browser to login. once logged in, it redirects back to the application reply url. if the app is installed locally, then the reply url will be a localhost url. your installed app must be listening on this port. also the localhost reply url must be registered as a valid reply url in azure ad.
Please sign in to rate this answer.
So25 0 Reputation points

2024-01-24T21:45:48.8533333+00:00

Thank you for the answer. As per suggestion, localhost reply url is registered as a valid reply url in azure ad (App registration -> Client app-> authentication -> redirect URLs -> http://localhost:9001). But when I access this url (offline locally), I still don't get the role part of the claim from Azure. Kindly let me know if I am missing something.

Bruce (SqlWork.com) 63,746 Reputation points

2024-01-24T22:06:32.6866667+00:00

your app should be listening on port 9001. your app passes to the browser the azure ad login site url passing your config info (tenantid, clientid, reply url, etc) as parameters. after a successful login azure ad will redirect back to port:9001 (your app). your app then parses the url to get the code, which can then be used to call azure ad to get the access tokens (which will have the claims).
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Does azure ad authentication work with windows installer

1 answer

Your answer