OAuth 2: how to set simple OAuth Connection between an internal App and Azure AD

AdamBaezHDA-6513 1 Reputation point
2022-03-18T20:04:45.64+00:00

What is the most straightforward way to configure OAuth 2 for Enterprise app built internally. We don't need multi-tenant or scopes. We just need internal AD users to log into the system using OAuth 2 and OIDC. We've tried multiple options when creating Enterprise Apps and have even followed the Integration Assistant in Application Registrations.

We understand our tenant information but we can't seem to get a client ID and client setup in order to use it

Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes

2 answers

Sort by: Most helpful
  1. Cristian SPIRIDON 4,486 Reputation points Volunteer Moderator
    2022-03-21T05:38:20.057+00:00

    Hi,

    You need to register your app at App Registration.
    Enterprise Apps is where you see the 'Service Principal'

    More info about the difference you can see at:
    https://stackoverflow.com/questions/54071385/difference-between-enterprise-application-and-app-registration-in-azure

    For your use case you can register an App as single tenant:
    https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app

    Hope this helps!

    0 comments No comments

  2. Siva-kumar-selvaraj 15,721 Reputation points
    2022-03-22T00:09:18.873+00:00

    Hello @AdamBaezHDA-6513 ,

    Thank you for your query. From your query, I understand that you would like to know detailed information about integrating applications with Azure AD using Oauth 2 or OIDC.

    I hope you are referring to web based application as shown below in your scenario, if so then please find following documentation which has detailed overview, code samples in the Web app that signs in users scenario. You can leverage same concept to integrate your application with Azure AD. Hope this helps.

    185298-image.png

    Overview of web app SSO using Microsoft identity platform: https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-app-types#web-apps
    Scenario: Web app that signs in users: https://learn.microsoft.com/en-us/azure/active-directory/develop/scenario-web-app-sign-user-overview?tabs=aspnetcore
    Quickstart: Add sign-in with Microsoft to a web app : https://learn.microsoft.com/en-us/azure/active-directory/develop/web-app-quickstart?pivots=devlang-aspnet-core

    -----
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.