Azure easy auth API

1
votes

I've setup my mvc web app to use Azure easy auth. I need to pass the user role to the application code.

I've seen that easy auth already publishes an API, so that I can call /.auth/me and retrieve the user login. I can't find any documentation on this API - does it support other requests that can be used to pass a role?

Alternative would be to use the token store to call the graph API, but as I only need basic info, I wondered if there was a simpler way?

Thanks,

Mark

1
azure-active-directoryazure-app-service-envrmnt
To further clarify this question.... I have my web app setup to use azure ad b2c and I have my roles defined in groups. Specifically I'm trying to understand if I can find a signed in users group from the easy auth api without having to call in to the graph api? – Mark Wilson

1 Answers

1
votes

If you want to know which application role has been assigned for current login user : enter image description here

you could check the roles claim in ID token :enter image description here

Update :

Currently , you can't get group claims in azure ad B2C with easy auth , you could find same user voice here .