AspCore 2.2 Azure Active Directory : Authorization failed

Question

I try to integrate Azure Active Directory and Asp.net CORE 2.2.

public void ConfigureServices(IServiceCollection services)
    {
        services.AddAuthentication(AzureADDefaults.BearerAuthenticationScheme)
            .AddAzureADBearer(options => Configuration.Bind("AzureAd", options));
        services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
    }

    // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
    public void Configure(IApplicationBuilder app, IHostingEnvironment env)
    {
        if (env.IsDevelopment())
        {
            app.UseDeveloperExceptionPage();
        }
        else
        {
            // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts.
            app.UseHsts();
        }

        app.UseHttpsRedirection();
        app.UseAuthentication();
        app.UseMvc();
    }

Appsettings.json

{"AzureAd": {
"Instance": "https://login.microsoftonline.com/",
"Domain": "xxxxx.onmicrosoft.com",
"TenantId": "xxxxxx", 
"ClientId": "xxxx" } },"AllowedHosts": "*"}

The results: Error : info: Microsoft.AspNetCore.Authorization.DefaultAuthorizationService[2] Authorization failed.

Please, i found any solution for this issue.

Thank you very much

I dont know if this is your case, but if you are trying to authenticate with a token for MS Graph, it wont work. You need to issue a token for your own Web API and not reuse tokens from other resources. — Tiago B

Julien Julien · Accepted Answer · 2019-09-16T19:47:40

May be a good solution is to modify the startup.cs

 public void ConfigureServices(IServiceCollection services)
    {
        services.AddAuthentication(sharedOptions =>
        {
            sharedOptions.DefaultChallengeScheme = AzureADDefaults.AuthenticationScheme;
            sharedOptions.DefaultAuthenticateScheme = AzureADDefaults.AuthenticationScheme;
        })
        .AddAzureAD(options => Configuration.Bind("AzureAD", options));

        services.AddMvc().SetCompatibilityVersion(CompatibilityVersion.Version_2_2);
    }

And includes in the controller

[Authorize(AuthenticationSchemes = "AzureAD")]
[Route("api/[controller]")]
[ApiController]

AspCore 2.2 Azure Active Directory : Authorization failed

2 Answers