Front Door + App Service with built-in authentication not working

1
votes

I'm trying to use App Service with standard App Registration built-in authentication behind a Front Door with no success.

My setup is:

  1. An App Service "myapp.azurewebsites.com" with built-in authentication.
  2. App Registration "app-auth" as auth provider.
  3. I have "app-auth" configured in my App Service for automatic authentication via Provider.
  4. Front Door "frontdoor.example.com" forwards requests to my App Service.

My App Registration "app-auth" has a redirect URL assigned the Front Door public name example "frontdoor.example.com".

Problems I'm having:

  • App Service keeps sending it's own name "myapp.azurewebsites.com" as request_uri query string login in to Azure Active Directory. It must send the Front Door URL.
    enter image description here
  • Setting up "frontdoor.example.com" host header in Front Door fails, as it requires it to match the App Service name. enter image description here

Am I missing some configuration? Or, do I need to use custom authentication when behind a Front Door?

1
azureazure-web-app-serviceazure-front-door
Could you share your C# code for authentication please ? you need to override the redirect_uri. Also which net version / framewrok are you using ? – Thomas
@Thomas with built-in authentication code there is no need for code. That is the purpose of that feature in App Services, no-code authentication. It works perfectly on App Services directly, problem is behind a load balancer, on which I can't find a way to configure the redirect_uri. – Evandro Pomatti

1 Answers

0
votes

it seems you have misconfigured the redirect URI in your APP service registration in Azure AD, that is where you specify the redirect_URI, it has nothing to do with the app service or the front door itself.