Does Azure AD/ Identity platform provide API for user doing login and get authorization code? instead of letting user input username/password interactively in the login page

Question

Does Azure AD/ Identity platform provide API for user doing login and get authorization code? instead of letting user input username/password interactively in the login page

Li Yang 1

I am trying to user curl to do the user login and get the auth code, then use the auth code to exchange the access tocken/id tocken, but don't know what is the API that I can use for login the use and get the auth code,
does the azure ad/idp can only do interactive user login through login page?
please help me, thank you very much!

Dillon Silzer 57,831 Reputation points Volunteer Moderator

2022-07-16T03:58:53.403+00:00

Which API are you trying to use?
Li Yang 1 Reputation point

2022-07-17T21:00:48.56+00:00

That is what I was asking, I what to know how the user can do login/authenticate by using curl or postman without interactively inputing user/password in the login page.
For example, with okta, I can get a sessionToken by the following curl
curl -v -X POST -H "Accept: application/json" -H "Content-Type: application/json" -d '{
"username": "******@spirent.com",
"password": "passord123",
"options": {
"multiOptionalFactorEnroll": false,
"warnBeforePasswordExpired": false
}
}' "https://dev-51146019.okta.com/api/v1/authn"

Then using the token, I get he authentication code by the following curl

curl -v "https://dev-51146019.okta.com/oauth2/default/v1/authorize?client_id=0oa56n7w5if1Aidih5d7&response_type=code&scope=openid+profile+email&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fauthorization-code%2Fcallback&nonce=SvgvrFfpHxwTOtotKswBnDwELnUb9_vUVwvo-65TTwY%3D&response_mode=query&state=a2cddbb4901c964c5b42aace224ea5f2&sessionToken=20111XYFmxLh2G2-W0es_FdOiKgDOd2uwqSl_2mEd-GL5ZeMSKMMCP3"

withe the authentication code, I can exchange for access token/id token

Does, Azure AD has similar API for developer to use to login the end user and get authenticated?

thanks!

2 answers

Your answer

Dillon Silzer 57,831 Reputation points Volunteer Moderator

2022-07-16T03:58:53.403+00:00

Which API are you trying to use?
Li Yang 1 Reputation point

2022-07-17T21:00:48.56+00:00

That is what I was asking, I what to know how the user can do login/authenticate by using curl or postman without interactively inputing user/password in the login page.
For example, with okta, I can get a sessionToken by the following curl
curl -v -X POST -H "Accept: application/json" -H "Content-Type: application/json" -d '{
"username": "******@spirent.com",
"password": "passord123",
"options": {
"multiOptionalFactorEnroll": false,
"warnBeforePasswordExpired": false
}
}' "https://dev-51146019.okta.com/api/v1/authn"

Then using the token, I get he authentication code by the following curl

curl -v "https://dev-51146019.okta.com/oauth2/default/v1/authorize?client_id=0oa56n7w5if1Aidih5d7&response_type=code&scope=openid+profile+email&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Fauthorization-code%2Fcallback&nonce=SvgvrFfpHxwTOtotKswBnDwELnUb9_vUVwvo-65TTwY%3D&response_mode=query&state=a2cddbb4901c964c5b42aace224ea5f2&sessionToken=20111XYFmxLh2G2-W0es_FdOiKgDOd2uwqSl_2mEd-GL5ZeMSKMMCP3"

withe the authentication code, I can exchange for access token/id token

Does, Azure AD has similar API for developer to use to login the end user and get authenticated?

thanks!

Answer 1

Dillon Silzer 57,831 Volunteer Moderator

Hello @Li Yang

Yes, here is a guide to get an OAuth Token from Azure API with POSTMAN.

https://documenter.getpostman.com/view/6227162/T1Ds8abg#e60544da-1da5-47d7-a859-939504f005a7

Azure REST API reference for all of the REST API services available.

https://learn.microsoft.com/en-us/rest/api/azure/

----------------------------

If this helps please mark as correct answer.

Li Yang 1 Reputation point

2022-07-18T18:16:41.623+00:00

Hi DillonJS,

Thanks for the info, I understand I can get the Oauth token from the API you posted, but it is the grant type "grant_type=client_credentials",
I am asking if the grant type is authorization_code code, how do I use API to input username/password to get the auth code? then I can use auth code to get the oauth token.
I am specifically asking how I can send post with username password to get the auth code without doing it interactively in the browser UI. thanks , please comments
Dillon Silzer 57,831 Reputation points Volunteer Moderator

2022-07-18T20:07:29.487+00:00

What are you specifically trying to do when they authenticate? Read their user profile? Make changes to their account?
Li Yang 1 Reputation point

2022-07-18T20:38:53.247+00:00
We are trying to develop a testing tool which will simulate two roles(sides)

simulate the (User+AppClient)

simulate the API web ( resource)

when user trying to access a resource the AppClient will redirect the user to the identity provider for authentication/authorization, after user login, the user will be redirected to the Applicent with Authorization code in the redirect URL, then the AppClient can use the authorization code to exchange for the access token, so the appclient can use the access token to access the resource(API web)
So, to answer your question, after user authenticated, appClient is suppose to get the authorization code to exchange for the access token
What I want to know is, without browser, in our tool how can we do user login and get the authorization code, any API can be used by us to do user login without interactively input username/password (like in browser UI)? hope the question is clear, thank you!

Answer 2

Yang, Li 26

Hi

Can anybody help answer this question? we really need to understand this and proceed our project, thank you very much!

Share via

Does Azure AD/ Identity platform provide API for user doing login and get authorization code? instead of letting user input username/password interactively in the login page

2 answers

Your answer