Issue configuring Azure AD with Function App

Dale Godfredson 221

I've followed the documentation here (https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad#configure-client-apps-to-access-your-app-service) to configure App Registration for an Azure Function App. I've tried both using an existing App Registration and Creating a new App Registration automatically however I just get the following error message:

You do not have permission to view this directory or page.

The function app works correctly before I create and configure the App Registration.

Can someone please assist. The URL is: https://coy-test-auth.azurewebsites.net/api/TestAuth?

Thanks
Dale

1 answer

Pramod Valavala 20,651 Reputation points Microsoft Employee

2021-08-24T19:07:16.723+00:00

@Dale Godfredson There is an option to set the default response - 401 or 302. A 302 response will redirect the caller to the identity provider to perform authentication. In your case, you seem to have set it to 401.

If you are using File based Configuration, you need to set globalValidation.unauthenticatedClientAction to RedirectToLoginPage.
Please sign in to rate this answer.
Dale Godfredson 221 Reputation points

2021-08-29T10:23:12.577+00:00

Hi Pramod, thanks for responding.
I
I've followed this tutorial and got it working with calling graph API's: https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-v2-javascript

I've added a custom Azure Function App and configured the registration for it as follows:

added the following redirect: https://coy-test-auth.azurewebsites.net/.auth/login/aad/callback

Selected ID tokens

Accounts in this organisation only

Under the web app registration I've specified user_impersonation for the api registration above

I can access the Graph API's ok but get 401 error when requesting my function app

In the js code I am explicitly adding the bearer token when issuing the api request however when I view the request with Fiddler the token isn't in the request, yet it is in the Graph API request?

Can you please assist.

Thanks
Dale

Pramod Valavala 20,651 Reputation points Microsoft Employee

2021-10-18T11:15:45.883+00:00

@Dale Godfredson Sorry for not getting back on this one. The token cannot be used directly and instead should be exchanged for another token as shown in the authentication flow docs.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Issue configuring Azure AD with Function App

1 answer

Your answer