Get the AAD user token from C++ application on Hololens

Question

Get the AAD user token from C++ application on Hololens

Francis Dube 6

Hi,

I have built an Hololens application in C++.

To manage my user authentication, I want to retreived the user token from the user that logged into the Hololens with its Azure Active Directory account.
The recommended way to do this is using the MSAL, however this lib is not available for C++ so I cannot integrate it to my app.

I have tried with Web Authentication Manager, but I am facing issues after issues and the process seems to be bugged. My work is heavily inpired by this blog

If anyone had this need and found a solution, I would love to know how you did it.

Thanks for any help!

Franklin Chen 1 Reputation point Microsoft Employee Moderator

2022-03-07T02:16:28.483+00:00

Hi FrancisDube, as you mentioned your attempt with Web Authentication Manager, could you please describe more about what the issues are? Could you share some code snippets to let us know what you are currently working on?
Francis Dube 6 Reputation points

2022-03-07T18:30:20.753+00:00

Hi Franklin Chen,

There seems to be an issue with the WebTokenRequest. When creating it, it requires the client id param. However, when executing the GetTokenSilentlyAsync function, there is an error that a client id is needed. If I had it to the Properties, it does work, however, at the function RequestTokenAsync (Line 416), there is another error that the client id is duplicated.
If I remove the id from the webTokenRequest before calling RequestTokenAsync, I get an error that the client id is missing.

Here some part of my code. It is quite ugly because of all the callbacks needed. My code is heavily inspired from this.

Also, I would prefer if there was no user Interaction needed, but I don't know how to do that.

Thanks for any help!
Franklin Chen 1 Reputation point Microsoft Employee Moderator

2022-03-10T06:06:31.527+00:00

From your code snippets, you are trying to obtain an access token from Azure Mixed Reality Security Token Service (STS). Could you please follow this doc to ensure your application registered in AAD has been set correctly? Also the client & tenant information, scope should be correct in your code. With that, I would suggest verifying them via this sample.
Francis Dube 6 Reputation points

2022-03-10T15:37:35.907+00:00

Good news, I have successfully make it work by using "User.Read" as the WebTokenRequest scope and "https://graph.microsoft.com" as the resource. I also had to change the redirect URL in my aad app to something that was showing in my dev console.

Your answer

Franklin Chen 1 Reputation point Microsoft Employee Moderator

2022-03-07T02:16:28.483+00:00

Hi FrancisDube, as you mentioned your attempt with Web Authentication Manager, could you please describe more about what the issues are? Could you share some code snippets to let us know what you are currently working on?
Francis Dube 6 Reputation points

2022-03-07T18:30:20.753+00:00

Hi Franklin Chen,

There seems to be an issue with the WebTokenRequest. When creating it, it requires the client id param. However, when executing the GetTokenSilentlyAsync function, there is an error that a client id is needed. If I had it to the Properties, it does work, however, at the function RequestTokenAsync (Line 416), there is another error that the client id is duplicated.
If I remove the id from the webTokenRequest before calling RequestTokenAsync, I get an error that the client id is missing.

Here some part of my code. It is quite ugly because of all the callbacks needed. My code is heavily inspired from this.

Also, I would prefer if there was no user Interaction needed, but I don't know how to do that.

Thanks for any help!
Franklin Chen 1 Reputation point Microsoft Employee Moderator

2022-03-10T06:06:31.527+00:00

From your code snippets, you are trying to obtain an access token from Azure Mixed Reality Security Token Service (STS). Could you please follow this doc to ensure your application registered in AAD has been set correctly? Also the client & tenant information, scope should be correct in your code. With that, I would suggest verifying them via this sample.
Francis Dube 6 Reputation points

2022-03-10T15:37:35.907+00:00

Good news, I have successfully make it work by using "User.Read" as the WebTokenRequest scope and "https://graph.microsoft.com" as the resource. I also had to change the redirect URL in my aad app to something that was showing in my dev console.

Share via

Get the AAD user token from C++ application on Hololens

Your answer