Thanks very much my friend, I tried for hours unsuccessful, but after I watch your video I can with success!!!! My issue was policy send "id" and extension attribute e don't "ExtensionID"....a hug from a new Brazilian friend!!!
This is great. But if I want to authenticate using Azure AD but still use Identity Roles/Claims that I have stored in aspnet_membership identity database, is it possible to merge the 2? Any pointers on that would be extremely helpful! Like, I basically want to merge "Individual Accounts" type of project for my roles/claims BUT with just Azure AD Authentication and NO Forms authentication. Thanks
Within Azure portal, Can we see the custom claims that was set for the Application? Else Is there a command to see the custom claims for the Application ?
what is the extention_dfe_71d219ed640dd81d7ffe8255a9138 from where its coming i see in last video you have extended conceptsworkEmpoyeeID, but not understand why/How this (extention_dfe_71d219ed640dd81d7ffe8255a9138) value coming in policy scripts
When you extend an attribute from onprem, this is how it gets listed in Microsoft Graph. Also this attribute name can be checked by querying users directly from powershell.
Does it mandatory to add scope to normal CRUD application? Because User.Read and Mail.Read does not required for my application. So my original question was does it mandatory to call Microsoft graph for consent the request ?
Microsoft Graph would always rely on the token that has been issued by Azure AD. So when you define scope, you app lets Azure AD know, which resources it is going to access. Now when this information is present in the token and the same token is presented to Microsoft Graph you get the respective access. This is why to access different kind of resources, there are different values for scope.
Veery very useful content on your channel. Do tunned us everyday
Very well explained. It would be really good to see a SAML example too.
Noted
Thanks very much my friend, I tried for hours unsuccessful, but after I watch your video I can with success!!!! My issue was policy send "id" and extension attribute e don't "ExtensionID"....a hug from a new Brazilian friend!!!
Thank you.
This is great. But if I want to authenticate using Azure AD but still use Identity Roles/Claims that I have stored in aspnet_membership identity database, is it possible to merge the 2? Any pointers on that would be extremely helpful! Like, I basically want to merge "Individual Accounts" type of project for my roles/claims BUT with just Azure AD Authentication and NO Forms authentication. Thanks
How to get this custom claim value in access token instead of id_Token??
Within Azure portal, Can we see the custom claims that was set for the Application?
Else Is there a command to see the custom claims for the Application ?
docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-claims-mapping#prerequisites
bro In fiddler i am not getting any token also in my console log it is saying that jwt token is hidden for security purpose.
now what should i do?
what is the extention_dfe_71d219ed640dd81d7ffe8255a9138 from where its coming
i see in last video you have extended conceptsworkEmpoyeeID, but not understand why/How this (extention_dfe_71d219ed640dd81d7ffe8255a9138) value coming in policy scripts
When you extend an attribute from onprem, this is how it gets listed in Microsoft Graph. Also this attribute name can be checked by querying users directly from powershell.
Does it mandatory to add scope to normal CRUD application? Because User.Read and Mail.Read does not required for my application. So my original question was does it mandatory to call Microsoft graph for consent the request ?
Microsoft Graph would always rely on the token that has been issued by Azure AD.
So when you define scope, you app lets Azure AD know, which resources it is going to access.
Now when this information is present in the token and the same token is presented to Microsoft Graph you get the respective access.
This is why to access different kind of resources, there are different values for scope.
@@ConceptsWork Ok, i got it now.
Sir, while executing the VB code getting the error
This site can’t be reached - localhost:44326/
what else I have to modify
reach me learnconceptswork@gmail.com, will check
thanks the IIS express tab is missing on my Visual Studio is there a way to fix this ?
Which version of Visual studio you have ?
@@ConceptsWork thanks i fixed it
Awesome, reach out to me for any other issues, if you face.