azure 应用服务身份验证模块是否支持 azure aad b2c? [英] does the azure App Service Authentication module suport azure aad b2c?

问题描述

我有一个需要后端的 UWP 应用.我想使用 azure 应用服务并需要为后台设置身份验证.应用服务身份验证模块可以轻松地为应用设置和身份验证.

I have a UWP app that needs a backend. I want to use azure app service and need set an authentication for the background. The App Service Authentication module can easily set and Authentication for the app.

我想使用 AAD B2C，但应用服务认证模块说它不支持 aad 2.0/msal.那么，App Service Authentication 模块是否可以支持 AAD B2C?

I wish to use AAD B2C, but the App Service authentication module say that it does not support aad 2.0/msal. So, does the App Service Authentication module can support AAD B2C?

而且，我如何验证 Web 服务上的 AAD B2C 令牌签名?Microsoft doc 说可以使用一些库来验证 AAD B2C 令牌签名，可以使用 msal 来验证 asp.net 核心 Web 服务上的 AAD B2C 令牌签名吗?

And, how can I verify the AAD B2C token signature on the webservice? Microsoft doc said can use some library to verify the AAD B2C token signature, can msal be used to Verify the AAD B2C token signature on a asp.net core web service?

推荐答案

应用服务身份验证模块是否可以支持 AAD B2C?

does the App Service Authentication module can support AAD B2C?

是的，App Service Easy auth 支持 AAD B2C，您可以在高级管理模式下进行配置.

Yes, App Service easy auth supports AAD B2C, you can configure it under Advanced management mode.

将客户端 ID 设置为来自 Azure AD B2C 租户的应用程序客户端 ID.

Set the Client ID to be the Application Client ID from Azure AD B2C tenant.

将问题 URL 设置为策略的元数据端点.

Set the Issue URL to be the Metadata Endpoint for the policy.

https://tonyb2ctest.b2clogin.com/tonyb2ctest.onmicrosoft.com/v2.0/.well-known/openid-configuration?p=B2C_1_testsignupin

注意:不要忘记在 azure 广告租户应用程序中设置回复 url https://XXX.azurewebsites.net/.auth/login/aad/callback

Note: don't forget to set the reply url in azure ad tenant application https://XXX.azurewebsites.net/.auth/login/aad/callback

如何验证网络服务上的 AAD B2C 令牌签名?

how can I verify the AAD B2C token signature on the webservice?

许多开源库可用于验证 JWT，这与 Azure 应用服务无关.

Many open-source libraries are available for validating JWTs, it doesn't matter with Azure App service.

这篇关于azure 应用服务身份验证模块是否支持 azure aad b2c?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！