具有Azure Active Directory的ActiveDirectoryMembershipProvider [英] ActiveDirectoryMembershipProvider with Azure Active Directory

问题描述

我意识到还有其他（首选）方法可以通过Azure Active Directory实现身份验证，但是可以将标准 ActiveDirectoryMembershipProvider 与 Azure Active Directory 一起用于 Azure网站？

I realize there are other (preferred) ways of implementing authentication with Azure Active Directory, but is it possible to use the standard ActiveDirectoryMembershipProvider with Azure Active Directory for an Azure website?

推荐答案

否。无法将ActiveDirectoryMembershipProvider与Azure Active Directory一起使用。
。 （句点）：）

No. There is no way to use ActiveDirectoryMembershipProvider with Azure Active Directory. . (Period) :)

为什么？

ActiveDirectoryMambershipProvider使用 Active Directory应用程序模式（ADAM）服务器，并通过LDAP协议与AD对话。 Azure AD不支持这两者。在云中替换LDAP是 Azure AD Graph API 。

ActiveDirectoryMambershipProvider uses Active Directory Application Mode (ADAM) server and talks to AD over LDAP protocol. Both of which are not supported by Azure AD. The replacement of LDAP in the Cloud is Azure AD Graph API.

但是，您可以使用基于声明的身份验证/授权模型，并使用Azure AD保护您的网站。这将有助于身份验证。授权-您可以使用基于角色的访问控制，并将Azure AD组转换为ASP.NET角色。

You can however use the Claims Based Authentication / Authorization model and protect your web site with Azure AD. This will help with Authentication. Authorization - you can use the role based access control and have your Azure AD groups translated into ASP.NET roles.

关于如何使用Azure AD保护网站而无需编写任何一行自定义代码的过程，这是一个相当漫长且经过充分描述的过程。

Here is pretty long and well described process of how to protect a web site with Azure AD without writing single line of custom code.

这篇关于具有Azure Active Directory的ActiveDirectoryMembershipProvider的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！